Описание
Mozilla Firefox before 22.0 does not properly implement certain DocShell inheritance behavior for the sandbox attribute of an IFRAME element, which allows remote attackers to bypass intended access restrictions via a FRAME element within an IFRAME element.
| Релиз | Статус | Примечание |
|---|---|---|
| devel | not-affected | 23.0~b2+build1-0ubuntu1 |
| lucid | ignored | end of life |
| precise | released | 22.0+build1-0ubuntu0.12.04.1 |
| quantal | released | 22.0+build1-0ubuntu0.12.10.1 |
| raring | released | 22.0+build1-0ubuntu0.13.04.1 |
| upstream | released | 22.0 |
Показывать по
EPSS
5 Medium
CVSS2
Связанные уязвимости
Mozilla Firefox before 22.0 does not properly implement certain DocShell inheritance behavior for the sandbox attribute of an IFRAME element, which allows remote attackers to bypass intended access restrictions via a FRAME element within an IFRAME element.
Mozilla Firefox before 22.0 does not properly implement certain DocShell inheritance behavior for the sandbox attribute of an IFRAME element, which allows remote attackers to bypass intended access restrictions via a FRAME element within an IFRAME element.
Mozilla Firefox before 22.0 does not properly implement certain DocShe ...
Mozilla Firefox before 22.0 does not properly implement certain DocShell inheritance behavior for the sandbox attribute of an IFRAME element, which allows remote attackers to bypass intended access restrictions via a FRAME element within an IFRAME element.
EPSS
5 Medium
CVSS2