Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-w8p9-p5cr-4q8f

Опубликовано: 13 мая 2022
Источник: github
Github: Не прошло ревью
CVSS3: 9.8

Описание

Special "about:" pages used by web content, such as RSS feeds, can load privileged "about:" pages in an iframe. If a content-injection bug were found in one of those pages this could allow for potential privilege escalation. This vulnerability affects Firefox < 51.

Special "about:" pages used by web content, such as RSS feeds, can load privileged "about:" pages in an iframe. If a content-injection bug were found in one of those pages this could allow for potential privilege escalation. This vulnerability affects Firefox < 51.

EPSS

Процентиль: 87%
0.0362
Низкий

9.8 Critical

CVSS3

Связанные уязвимости

CVSS3: 9.8
ubuntu
около 7 лет назад

Special "about:" pages used by web content, such as RSS feeds, can load privileged "about:" pages in an iframe. If a content-injection bug were found in one of those pages this could allow for potential privilege escalation. This vulnerability affects Firefox < 51.

CVSS3: 9.8
nvd
около 7 лет назад

Special "about:" pages used by web content, such as RSS feeds, can load privileged "about:" pages in an iframe. If a content-injection bug were found in one of those pages this could allow for potential privilege escalation. This vulnerability affects Firefox < 51.

CVSS3: 9.8
debian
около 7 лет назад

Special "about:" pages used by web content, such as RSS feeds, can loa ...

suse-cvrf
больше 8 лет назад

Security update for MozillaFirefox

EPSS

Процентиль: 87%
0.0362
Низкий

9.8 Critical

CVSS3