Описание
In uBlock before 0.9.5.15, the $rewrite filter option allows filter-list maintainers to run arbitrary code in a client-side session when a web service loads a script for execution using XMLHttpRequest or Fetch, and the script origin has an open redirect.
Ссылки
- ExploitMitigationThird Party Advisory
- Third Party Advisory
- ExploitMitigationThird Party Advisory
- Third Party Advisory
Уязвимые конфигурации
Конфигурация 1Версия до 0.9.5.15 (исключая)
cpe:2.3:a:ublockorigin:ublock_origin:*:*:*:*:*:*:*:*
EPSS
Процентиль: 76%
0.00944
Низкий
9 Critical
CVSS3
6.8 Medium
CVSS2
Дефекты
CWE-20
Связанные уязвимости
CVSS3: 9
github
больше 3 лет назад
In uBlock before 0.9.5.15, the $rewrite filter option allows filter-list maintainers to run arbitrary code in a client-side session when a web service loads a script for execution using XMLHttpRequest or Fetch, and the script origin has an open redirect.
EPSS
Процентиль: 76%
0.00944
Низкий
9 Critical
CVSS3
6.8 Medium
CVSS2
Дефекты
CWE-20