Поиск уязвимостей
Количество 8
Количество 8
GHSA-rcj2-hjg7-xj8p
When an "iframe" has a "sandbox" attribute and its content is specified using "srcdoc", that content does not inherit the containing page's Content Security Policy (CSP) as it should unless the sandbox attribute included "allow-same-origin". This vulnerability affects Firefox < 55.
CVE-2017-7788
When an "iframe" has a "sandbox" attribute and its content is specified using "srcdoc", that content does not inherit the containing page's Content Security Policy (CSP) as it should unless the sandbox attribute included "allow-same-origin". This vulnerability affects Firefox < 55.
CVE-2017-7788
When an "iframe" has a "sandbox" attribute and its content is specified using "srcdoc", that content does not inherit the containing page's Content Security Policy (CSP) as it should unless the sandbox attribute included "allow-same-origin". This vulnerability affects Firefox < 55.
CVE-2017-7788
When an "iframe" has a "sandbox" attribute and its content is specified using "srcdoc", that content does not inherit the containing page's Content Security Policy (CSP) as it should unless the sandbox attribute included "allow-same-origin". This vulnerability affects Firefox < 55.
CVE-2017-7788
When an "iframe" has a "sandbox" attribute and its content is specifie ...
BDU:2021-00122
Уязвимость браузера Mozilla Firefox, связанная с ошибкой наследования политики безопасности содержимого, позволяющая нарушителю обойти ограничения безопасности
ALT-PU-2017-2060
ALT-PU-2017-2060: package `firefox` update to version 55.0.1-alt1
ALT-PU-2018-1854
ALT-PU-2018-1854: package `firefox-esr` update to version 60.0.1-alt1
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
| GHSA-rcj2-hjg7-xj8p When an "iframe" has a "sandbox" attribute and its content is specified using "srcdoc", that content does not inherit the containing page's Content Security Policy (CSP) as it should unless the sandbox attribute included "allow-same-origin". This vulnerability affects Firefox < 55. | CVSS3: 9.8 | 2% Низкий | больше 4 лет назад |
 | CVE-2017-7788 When an "iframe" has a "sandbox" attribute and its content is specified using "srcdoc", that content does not inherit the containing page's Content Security Policy (CSP) as it should unless the sandbox attribute included "allow-same-origin". This vulnerability affects Firefox < 55. | CVSS3: 9.8 | 2% Низкий | больше 8 лет назад |
 | CVE-2017-7788 When an "iframe" has a "sandbox" attribute and its content is specified using "srcdoc", that content does not inherit the containing page's Content Security Policy (CSP) as it should unless the sandbox attribute included "allow-same-origin". This vulnerability affects Firefox < 55. | CVSS3: 9.8 | 2% Низкий | больше 9 лет назад |
 | CVE-2017-7788 When an "iframe" has a "sandbox" attribute and its content is specified using "srcdoc", that content does not inherit the containing page's Content Security Policy (CSP) as it should unless the sandbox attribute included "allow-same-origin". This vulnerability affects Firefox < 55. | CVSS3: 9.8 | 2% Низкий | больше 8 лет назад |
| CVE-2017-7788 When an "iframe" has a "sandbox" attribute and its content is specifie ... | CVSS3: 9.8 | 2% Низкий | больше 8 лет назад |
 | BDU:2021-00122 Уязвимость браузера Mozilla Firefox, связанная с ошибкой наследования политики безопасности содержимого, позволяющая нарушителю обойти ограничения безопасности | CVSS3: 9.8 | 2% Низкий | около 12 лет назад |
| ALT-PU-2017-2060 ALT-PU-2017-2060: package `firefox` update to version 55.0.1-alt1 | CVSS3: 9.8 | около 9 лет назад | |
| ALT-PU-2018-1854 ALT-PU-2018-1854: package `firefox-esr` update to version 60.0.1-alt1 | CVSS3: 9.8 | больше 8 лет назад |
Уязвимостей на страницу