Описание
JavaScript can be injected into an exported bookmarks file by placing JavaScript code into user-supplied tags in saved bookmarks. If the resulting exported HTML file is later opened in a browser this JavaScript will be executed. This could be used in social engineering and self-cross-site-scripting (self-XSS) attacks if users were convinced to add malicious tags to bookmarks, export them, and then open the resulting file. This vulnerability affects Firefox < 57.
| Релиз | Статус | Примечание |
|---|---|---|
| artful | released | 57.0+build4-0ubuntu0.17.10.5 |
| bionic | released | 57.0.1+build2-0ubuntu1 |
| devel | released | 57.0.1+build2-0ubuntu1 |
| esm-infra-legacy/trusty | DNE | trusty/esm was DNE [trusty was released [57.0+build4-0ubuntu0.14.04.4]] |
| precise/esm | DNE | |
| trusty | released | 57.0+build4-0ubuntu0.14.04.4 |
| trusty/esm | DNE | trusty was released [57.0+build4-0ubuntu0.14.04.4] |
| upstream | released | 57.0 |
| xenial | released | 57.0+build4-0ubuntu0.16.04.5 |
| zesty | released | 57.0+build4-0ubuntu0.17.04.5 |
Показывать по
EPSS
4.3 Medium
CVSS2
6.1 Medium
CVSS3
Связанные уязвимости
JavaScript can be injected into an exported bookmarks file by placing JavaScript code into user-supplied tags in saved bookmarks. If the resulting exported HTML file is later opened in a browser this JavaScript will be executed. This could be used in social engineering and self-cross-site-scripting (self-XSS) attacks if users were convinced to add malicious tags to bookmarks, export them, and then open the resulting file. This vulnerability affects Firefox < 57.
JavaScript can be injected into an exported bookmarks file by placing ...
JavaScript can be injected into an exported bookmarks file by placing JavaScript code into user-supplied tags in saved bookmarks. If the resulting exported HTML file is later opened in a browser this JavaScript will be executed. This could be used in social engineering and self-cross-site-scripting (self-XSS) attacks if users were convinced to add malicious tags to bookmarks, export them, and then open the resulting file. This vulnerability affects Firefox < 57.
Уязвимость браузера Mozilla Firefox, связанная с недостатками используемых мер по защите структуры веб-страницы, позволяющая нарушителю проводить межсайтовые сценарные атаки
EPSS
4.3 Medium
CVSS2
6.1 Medium
CVSS3