CVE-2018-5124

Опубликовано: 29 янв. 2018

Источник: redhat

CVSS3: 6.1

EPSS Низкий

Описание

Unsanitized output in the browser UI leaves HTML tags in place and can result in arbitrary code execution in Firefox before version 58.0.1.

Затронутые пакеты

Платформа	Пакет	Состояние
Red Hat Enterprise Linux 5	firefox	Not affected
Red Hat Enterprise Linux 6	firefox	Not affected
Red Hat Enterprise Linux 7	firefox	Not affected

Показывать по

Ссылки на источники

Дополнительная информация

Статус:

Important

Дефект:

CWE-79

https://bugzilla.redhat.com/show_bug.cgi?id=1540431firefox: Unsanitized output in browser UI can lead to arbitrary code execution

EPSS

Процентиль: 63%

0.01013

Низкий

6.1 Medium

CVSS3

Связанные уязвимости

CVE-2018-5124

CVSS3: 6.1

ubuntu

больше 7 лет назад

Unsanitized output in the browser UI leaves HTML tags in place and can result in arbitrary code execution in Firefox before version 58.0.1.

CVE-2018-5124

CVSS3: 6.1

nvd

больше 7 лет назад

Unsanitized output in the browser UI leaves HTML tags in place and can result in arbitrary code execution in Firefox before version 58.0.1.

CVE-2018-5124

CVSS3: 6.1

debian

больше 7 лет назад

Unsanitized output in the browser UI leaves HTML tags in place and can ...

GHSA-x85x-whmj-686x

CVSS3: 6.1

github

больше 4 лет назад

Unsanitized output in the browser UI leaves HTML tags in place and can result in arbitrary code execution in Firefox before version 58.0.1.

ALT-PU-2018-1178

CVSS3: 9.8

altlinux

больше 8 лет назад

ALT-PU-2018-1178: package `firefox` update to version 58.0.2-alt1

EPSS

Процентиль: 63%

0.01013

Низкий

6.1 Medium

CVSS3