CVE-2022-32308

Опубликовано: 13 июл. 2022

Источник: nvd

CVSS3: 6.1

EPSS Низкий

Описание

Cross Site Scripting (XSS) vulnerability in uBlock Origin extension before 1.41.1 allows remote attackers to run arbitrary code via a spoofed 'MessageSender.url' to the browser renderer process.

Ссылки

https://github.com/uBlockOrigin/uBlock-issues/issues/1992
Issue Tracking
Patch
Third Party Advisory
https://github.com/uBlockOrigin/uBlock-issues/issues/1992
Issue Tracking
Patch
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:ublock_origin_project:ublock_origin:*:*:*:*:*:*:*:*

Версия до 1.41.1 (исключая)

EPSS

Процентиль: 51%

0.00642

Низкий

6.1 Medium

CVSS3

Дефекты

CWE-79

Связанные уязвимости

CVE-2022-32308

CVSS3: 6.1

ubuntu

больше 4 лет назад

Cross Site Scripting (XSS) vulnerability in uBlock Origin extension before 1.41.1 allows remote attackers to run arbitrary code via a spoofed 'MessageSender.url' to the browser renderer process.

CVE-2022-32308

CVSS3: 6.1

debian

больше 4 лет назад

Cross Site Scripting (XSS) vulnerability in uBlock Origin extension be ...

GHSA-756h-ggr3-6vcj

CVSS3: 6.1

github

больше 4 лет назад

Cross Site Scripting (XSS) vulnerability in uBlock Origin extension before 1.41.1 allows remote attackers to run arbitrary code via a spoofed 'MessageSender.url' to the browser renderer process.

ALT-PU-2023-1156

CVSS3: 6.1

altlinux

почти 4 года назад

ALT-PU-2023-1156: package `firefox-ublock_origin` update to version 1.46.0-alt1

EPSS

Процентиль: 51%

0.00642

Низкий

6.1 Medium

CVSS3

Дефекты

CWE-79