Поиск уязвимостей
Количество 22
Количество 22
CVE-2019-17022
When pasting a <style> tag from the clipboard into a rich text editor, the CSS sanitizer does not escape < and > characters. Because the resulting string is pasted directly into the text node of the element this does not result in a direct injection into the webpage; however, if a webpage subsequently copies the node's innerHTML, assigning it to another innerHTML, this would result in an XSS vulnerability. Two WYSIWYG editors were identified with this behavior, more may exist. This vulnerability affects Firefox ESR < 68.4 and Firefox < 72.
CVE-2019-17022
When pasting a <style> tag from the clipboard into a rich text editor, the CSS sanitizer does not escape < and > characters. Because the resulting string is pasted directly into the text node of the element this does not result in a direct injection into the webpage; however, if a webpage subsequently copies the node's innerHTML, assigning it to another innerHTML, this would result in an XSS vulnerability. Two WYSIWYG editors were identified with this behavior, more may exist. This vulnerability affects Firefox ESR < 68.4 and Firefox < 72.
CVE-2019-17022
When pasting a <style> tag from the clipboard into a rich text editor, the CSS sanitizer does not escape < and > characters. Because the resulting string is pasted directly into the text node of the element this does not result in a direct injection into the webpage; however, if a webpage subsequently copies the node's innerHTML, assigning it to another innerHTML, this would result in an XSS vulnerability. Two WYSIWYG editors were identified with this behavior, more may exist. This vulnerability affects Firefox ESR < 68.4 and Firefox < 72.
CVE-2019-17022
When pasting a <style> tag from the clipboard into a rich text e ...
GHSA-wgfq-5c99-wv2w
When pasting a <style> tag from the clipboard into a rich text editor, the CSS sanitizer does not escape < and > characters. Because the resulting string is pasted directly into the text node of the element this does not result in a direct injection into the webpage; however, if a webpage subsequently copies the node's innerHTML, assigning it to another innerHTML, this would result in an XSS vulnerability. Two WYSIWYG editors were identified with this behavior, more may exist. This vulnerability affects Firefox ESR < 68.4 and Firefox < 72.
BDU:2020-01455
Уязвимость браузеров Firefox, Firefox ESR, связанная с непринятием мер по защите структуры веб-страницы, позволяющая нарушителю оказать воздействие на целостность данных
ELSA-2020-0127
ELSA-2020-0127: thunderbird security update (IMPORTANT)
ELSA-2020-0123
ELSA-2020-0123: thunderbird security update (IMPORTANT)
ELSA-2020-0120
ELSA-2020-0120: thunderbird security update (IMPORTANT)
ELSA-2020-0111
ELSA-2020-0111: firefox security update (CRITICAL)
ELSA-2020-0086
ELSA-2020-0086: firefox security update (CRITICAL)
ELSA-2020-0085
ELSA-2020-0085: firefox security update (CRITICAL)
openSUSE-SU-2020:0094-1
Security update for MozillaThunderbird
openSUSE-SU-2020:0060-1
Security update for MozillaFirefox
SUSE-SU-2020:14268-1
Security update for MozillaFirefox
SUSE-SU-2020:0142-1
Security update for MozillaThunderbird
SUSE-SU-2020:0078-1
Security update for MozillaFirefox
SUSE-SU-2020:0068-1
Security update for MozillaFirefox
ALT-PU-2020-1013
ALT-PU-2020-1013: package `firefox-esr` update to version 68.4.1-alt1
ALT-PU-2020-1110
ALT-PU-2020-1110: package `firefox` update to version 72.0.2-alt1
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2019-17022 When pasting a <style> tag from the clipboard into a rich text editor, the CSS sanitizer does not escape < and > characters. Because the resulting string is pasted directly into the text node of the element this does not result in a direct injection into the webpage; however, if a webpage subsequently copies the node's innerHTML, assigning it to another innerHTML, this would result in an XSS vulnerability. Two WYSIWYG editors were identified with this behavior, more may exist. This vulnerability affects Firefox ESR < 68.4 and Firefox < 72. | CVSS3: 6.1 | 2% Низкий | почти 7 лет назад |
 | CVE-2019-17022 When pasting a <style> tag from the clipboard into a rich text editor, the CSS sanitizer does not escape < and > characters. Because the resulting string is pasted directly into the text node of the element this does not result in a direct injection into the webpage; however, if a webpage subsequently copies the node's innerHTML, assigning it to another innerHTML, this would result in an XSS vulnerability. Two WYSIWYG editors were identified with this behavior, more may exist. This vulnerability affects Firefox ESR < 68.4 and Firefox < 72. | CVSS3: 6.1 | 2% Низкий | почти 7 лет назад |
 | CVE-2019-17022 When pasting a <style> tag from the clipboard into a rich text editor, the CSS sanitizer does not escape < and > characters. Because the resulting string is pasted directly into the text node of the element this does not result in a direct injection into the webpage; however, if a webpage subsequently copies the node's innerHTML, assigning it to another innerHTML, this would result in an XSS vulnerability. Two WYSIWYG editors were identified with this behavior, more may exist. This vulnerability affects Firefox ESR < 68.4 and Firefox < 72. | CVSS3: 6.1 | 2% Низкий | почти 7 лет назад |
| CVE-2019-17022 When pasting a <style> tag from the clipboard into a rich text e ... | CVSS3: 6.1 | 2% Низкий | почти 7 лет назад |
| GHSA-wgfq-5c99-wv2w When pasting a <style> tag from the clipboard into a rich text editor, the CSS sanitizer does not escape < and > characters. Because the resulting string is pasted directly into the text node of the element this does not result in a direct injection into the webpage; however, if a webpage subsequently copies the node's innerHTML, assigning it to another innerHTML, this would result in an XSS vulnerability. Two WYSIWYG editors were identified with this behavior, more may exist. This vulnerability affects Firefox ESR < 68.4 and Firefox < 72. | 2% Низкий | больше 4 лет назад | |
 | BDU:2020-01455 Уязвимость браузеров Firefox, Firefox ESR, связанная с непринятием мер по защите структуры веб-страницы, позволяющая нарушителю оказать воздействие на целостность данных | CVSS3: 6.1 | 2% Низкий | почти 7 лет назад |
| ELSA-2020-0127 ELSA-2020-0127: thunderbird security update (IMPORTANT) | почти 7 лет назад | ||
| ELSA-2020-0123 ELSA-2020-0123: thunderbird security update (IMPORTANT) | больше 6 лет назад | ||
| ELSA-2020-0120 ELSA-2020-0120: thunderbird security update (IMPORTANT) | почти 7 лет назад | ||
| ELSA-2020-0111 ELSA-2020-0111: firefox security update (CRITICAL) | почти 7 лет назад | ||
| ELSA-2020-0086 ELSA-2020-0086: firefox security update (CRITICAL) | больше 6 лет назад | ||
| ELSA-2020-0085 ELSA-2020-0085: firefox security update (CRITICAL) | почти 7 лет назад | ||
 | openSUSE-SU-2020:0094-1 Security update for MozillaThunderbird | почти 7 лет назад | ||
| openSUSE-SU-2020:0060-1 Security update for MozillaFirefox | почти 7 лет назад | ||
| SUSE-SU-2020:14268-1 Security update for MozillaFirefox | почти 7 лет назад | ||
| SUSE-SU-2020:0142-1 Security update for MozillaThunderbird | почти 7 лет назад | ||
| SUSE-SU-2020:0078-1 Security update for MozillaFirefox | почти 7 лет назад | ||
| SUSE-SU-2020:0068-1 Security update for MozillaFirefox | почти 7 лет назад | ||
| ALT-PU-2020-1013 ALT-PU-2020-1013: package `firefox-esr` update to version 68.4.1-alt1 | CVSS3: 8.8 | почти 7 лет назад | |
| ALT-PU-2020-1110 ALT-PU-2020-1110: package `firefox` update to version 72.0.2-alt1 | CVSS3: 8.8 | почти 7 лет назад |
Уязвимостей на страницу