Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-hxr8-chw2-2wqc

Опубликовано: 22 июл. 2025
Источник: github
Github: Не прошло ревью
CVSS3: 8.1

Описание

XSLT document loading did not correctly propagate the source document which bypassed its CSP. This vulnerability affects Firefox < 141, Firefox ESR < 128.13, Firefox ESR < 140.1, Thunderbird < 141, Thunderbird < 128.13, and Thunderbird < 140.1.

XSLT document loading did not correctly propagate the source document which bypassed its CSP. This vulnerability affects Firefox < 141, Firefox ESR < 128.13, Firefox ESR < 140.1, Thunderbird < 141, Thunderbird < 128.13, and Thunderbird < 140.1.

EPSS

Процентиль: 23%
0.00302
Низкий

8.1 High

CVSS3

Дефекты

CWE-693

Связанные уязвимости

CVSS3: 8.1
ubuntu
около 1 года назад

XSLT document loading did not correctly propagate the source document which bypassed its CSP. This vulnerability was fixed in Firefox 141, Firefox ESR 128.13, Firefox ESR 140.1, Thunderbird 141, Thunderbird 128.13, and Thunderbird 140.1.

CVSS3: 6.1
redhat
около 1 года назад

XSLT document loading did not correctly propagate the source document which bypassed its CSP. This vulnerability was fixed in Firefox 141, Firefox ESR 128.13, Firefox ESR 140.1, Thunderbird 141, Thunderbird 128.13, and Thunderbird 140.1.

CVSS3: 8.1
nvd
около 1 года назад

XSLT document loading did not correctly propagate the source document which bypassed its CSP. This vulnerability was fixed in Firefox 141, Firefox ESR 128.13, Firefox ESR 140.1, Thunderbird 141, Thunderbird 128.13, and Thunderbird 140.1.

CVSS3: 8.1
debian
около 1 года назад

XSLT document loading did not correctly propagate the source document ...

CVSS3: 4.3
fstec
около 1 года назад

Уязвимость браузеров Mozilla Firefox, Firefox ESR и почтового клиента Thunderbird, связанная с использованием недоверенного файла междоменной политики, позволяющая нарушителю оказать воздействие на целостность защищаемой информации

EPSS

Процентиль: 23%
0.00302
Низкий

8.1 High

CVSS3

Дефекты

CWE-693