Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-p5h8-cwcq-q5g2

Опубликовано: 22 дек. 2022
Источник: github
Github: Не прошло ревью
CVSS3: 6.5

Описание

An attacker could have injected CSS into stylesheets accessible via internal URIs, such as resource:, and in doing so bypass a page's Content Security Policy. This vulnerability affects Firefox ESR < 91.11, Thunderbird < 102, Thunderbird < 91.11, and Firefox < 101.

An attacker could have injected CSS into stylesheets accessible via internal URIs, such as resource:, and in doing so bypass a page's Content Security Policy. This vulnerability affects Firefox ESR < 91.11, Thunderbird < 102, Thunderbird < 91.11, and Firefox < 101.

EPSS

Процентиль: 19%
0.0006
Низкий

6.5 Medium

CVSS3

Дефекты

CWE-79
CWE-863

Связанные уязвимости

CVSS3: 6.5
ubuntu
больше 2 лет назад

An attacker could have injected CSS into stylesheets accessible via internal URIs, such as resource:, and in doing so bypass a page's Content Security Policy. This vulnerability affects Firefox ESR < 91.11, Thunderbird < 102, Thunderbird < 91.11, and Firefox < 101.

CVSS3: 6.1
redhat
почти 3 года назад

An attacker could have injected CSS into stylesheets accessible via internal URIs, such as resource:, and in doing so bypass a page's Content Security Policy. This vulnerability affects Firefox ESR < 91.11, Thunderbird < 102, Thunderbird < 91.11, and Firefox < 101.

CVSS3: 6.5
nvd
больше 2 лет назад

An attacker could have injected CSS into stylesheets accessible via internal URIs, such as resource:, and in doing so bypass a page's Content Security Policy. This vulnerability affects Firefox ESR < 91.11, Thunderbird < 102, Thunderbird < 91.11, and Firefox < 101.

CVSS3: 6.5
debian
больше 2 лет назад

An attacker could have injected CSS into stylesheets accessible via in ...

CVSS3: 6.1
fstec
почти 3 года назад

Уязвимость почтового клиента Thunderbird, браузера Firefox ESR, связанная с ошибкой при обработке таблиц стилей CSS, доступных через внутренние URI, как «ресурс:», позволяющая нарушителю обойти реализованную политику безопасности содержимого

EPSS

Процентиль: 19%
0.0006
Низкий

6.5 Medium

CVSS3

Дефекты

CWE-79
CWE-863