Поиск уязвимостей
Количество 7
Количество 7
GHSA-5q3m-44wf-w4hc
A "data:" URL loaded in a new tab did not inherit the Content Security Policy (CSP) of the original page, allowing for bypasses of the policy including the execution of JavaScript. In prior versions when "data:" documents also inherited the context of the original page this would allow for potential cross-site scripting (XSS) attacks. This vulnerability affects Firefox < 57.
CVE-2017-7834
A "data:" URL loaded in a new tab did not inherit the Content Security Policy (CSP) of the original page, allowing for bypasses of the policy including the execution of JavaScript. In prior versions when "data:" documents also inherited the context of the original page this would allow for potential cross-site scripting (XSS) attacks. This vulnerability affects Firefox < 57.
CVE-2017-7834
A "data:" URL loaded in a new tab did not inherit the Content Security Policy (CSP) of the original page, allowing for bypasses of the policy including the execution of JavaScript. In prior versions when "data:" documents also inherited the context of the original page this would allow for potential cross-site scripting (XSS) attacks. This vulnerability affects Firefox < 57.
CVE-2017-7834
A "data:" URL loaded in a new tab did not inherit the Content Security ...
BDU:2021-00215
Уязвимость реализации механизма CSP (Content Security Policy браузера Mozilla Firefox, позволяющая нарушителю проводить межсайтовые сценарные атаки
ALT-PU-2017-2739
ALT-PU-2017-2739: package `firefox` update to version 57.0.1-alt1
ALT-PU-2018-1854
ALT-PU-2018-1854: package `firefox-esr` update to version 60.0.1-alt1
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
| GHSA-5q3m-44wf-w4hc A "data:" URL loaded in a new tab did not inherit the Content Security Policy (CSP) of the original page, allowing for bypasses of the policy including the execution of JavaScript. In prior versions when "data:" documents also inherited the context of the original page this would allow for potential cross-site scripting (XSS) attacks. This vulnerability affects Firefox < 57. | CVSS3: 6.1 | 2% Низкий | больше 4 лет назад |
 | CVE-2017-7834 A "data:" URL loaded in a new tab did not inherit the Content Security Policy (CSP) of the original page, allowing for bypasses of the policy including the execution of JavaScript. In prior versions when "data:" documents also inherited the context of the original page this would allow for potential cross-site scripting (XSS) attacks. This vulnerability affects Firefox < 57. | CVSS3: 6.1 | 2% Низкий | больше 8 лет назад |
 | CVE-2017-7834 A "data:" URL loaded in a new tab did not inherit the Content Security Policy (CSP) of the original page, allowing for bypasses of the policy including the execution of JavaScript. In prior versions when "data:" documents also inherited the context of the original page this would allow for potential cross-site scripting (XSS) attacks. This vulnerability affects Firefox < 57. | CVSS3: 6.1 | 2% Низкий | больше 8 лет назад |
| CVE-2017-7834 A "data:" URL loaded in a new tab did not inherit the Content Security ... | CVSS3: 6.1 | 2% Низкий | больше 8 лет назад |
 | BDU:2021-00215 Уязвимость реализации механизма CSP (Content Security Policy браузера Mozilla Firefox, позволяющая нарушителю проводить межсайтовые сценарные атаки | CVSS3: 6.1 | 2% Низкий | больше 9 лет назад |
| ALT-PU-2017-2739 ALT-PU-2017-2739: package `firefox` update to version 57.0.1-alt1 | CVSS3: 9.8 | почти 9 лет назад | |
| ALT-PU-2018-1854 ALT-PU-2018-1854: package `firefox-esr` update to version 60.0.1-alt1 | CVSS3: 9.8 | больше 8 лет назад |
Уязвимостей на страницу