Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-jrmg-2w74-rwc9

Опубликовано: 24 мая 2022
Источник: github
Github: Не прошло ревью

Описание

Using object or embed tags, it was possible to frame other websites, even if they disallowed framing using the X-Frame-Options header. This vulnerability affects Thunderbird < 78 and Firefox < 78.0.2.

Using object or embed tags, it was possible to frame other websites, even if they disallowed framing using the X-Frame-Options header. This vulnerability affects Thunderbird < 78 and Firefox < 78.0.2.

EPSS

Процентиль: 67%
0.01142
Низкий

Связанные уязвимости

CVSS3: 6.5
ubuntu
около 6 лет назад

Using object or embed tags, it was possible to frame other websites, even if they disallowed framing using the X-Frame-Options header. This vulnerability affects Thunderbird < 78 and Firefox < 78.0.2.

CVSS3: 6.5
redhat
больше 6 лет назад

Using object or embed tags, it was possible to frame other websites, even if they disallowed framing using the X-Frame-Options header. This vulnerability affects Thunderbird < 78 and Firefox < 78.0.2.

CVSS3: 6.5
nvd
около 6 лет назад

Using object or embed tags, it was possible to frame other websites, even if they disallowed framing using the X-Frame-Options header. This vulnerability affects Thunderbird < 78 and Firefox < 78.0.2.

CVSS3: 6.5
debian
около 6 лет назад

Using object or embed tags, it was possible to frame other websites, e ...

CVSS3: 6.5
altlinux
больше 6 лет назад

ALT-PU-2020-2354: package `firefox` update to version 78.0.2-alt1

EPSS

Процентиль: 67%
0.01142
Низкий