Поиск уязвимостей
Количество 7
Количество 7
GHSA-42vq-2prv-qxmf
Control characters prepended before "javascript:" URLs pasted in the addressbar can cause the leading characters to be ignored and the pasted JavaScript to be executed instead of being blocked. This could be used in social engineering and self-cross-site-scripting (self-XSS) attacks where users are convinced to copy and paste text into the addressbar. This vulnerability affects Firefox < 57.
CVE-2017-7839
Control characters prepended before "javascript:" URLs pasted in the addressbar can cause the leading characters to be ignored and the pasted JavaScript to be executed instead of being blocked. This could be used in social engineering and self-cross-site-scripting (self-XSS) attacks where users are convinced to copy and paste text into the addressbar. This vulnerability affects Firefox < 57.
CVE-2017-7839
Control characters prepended before "javascript:" URLs pasted in the addressbar can cause the leading characters to be ignored and the pasted JavaScript to be executed instead of being blocked. This could be used in social engineering and self-cross-site-scripting (self-XSS) attacks where users are convinced to copy and paste text into the addressbar. This vulnerability affects Firefox < 57.
CVE-2017-7839
Control characters prepended before "javascript:" URLs pasted in the a ...
BDU:2021-00234
Уязвимость браузера Mozilla Firefox, связанная с игнорированием ведущих символов javascript в адресной строке, позволяющая нарушителю проводить межсайтовые сценарные атаки
ALT-PU-2017-2739
ALT-PU-2017-2739: package `firefox` update to version 57.0.1-alt1
ALT-PU-2018-1854
ALT-PU-2018-1854: package `firefox-esr` update to version 60.0.1-alt1
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
| GHSA-42vq-2prv-qxmf Control characters prepended before "javascript:" URLs pasted in the addressbar can cause the leading characters to be ignored and the pasted JavaScript to be executed instead of being blocked. This could be used in social engineering and self-cross-site-scripting (self-XSS) attacks where users are convinced to copy and paste text into the addressbar. This vulnerability affects Firefox < 57. | CVSS3: 6.1 | 1% Низкий | больше 4 лет назад |
 | CVE-2017-7839 Control characters prepended before "javascript:" URLs pasted in the addressbar can cause the leading characters to be ignored and the pasted JavaScript to be executed instead of being blocked. This could be used in social engineering and self-cross-site-scripting (self-XSS) attacks where users are convinced to copy and paste text into the addressbar. This vulnerability affects Firefox < 57. | CVSS3: 6.1 | 1% Низкий | больше 8 лет назад |
 | CVE-2017-7839 Control characters prepended before "javascript:" URLs pasted in the addressbar can cause the leading characters to be ignored and the pasted JavaScript to be executed instead of being blocked. This could be used in social engineering and self-cross-site-scripting (self-XSS) attacks where users are convinced to copy and paste text into the addressbar. This vulnerability affects Firefox < 57. | CVSS3: 6.1 | 1% Низкий | больше 8 лет назад |
| CVE-2017-7839 Control characters prepended before "javascript:" URLs pasted in the a ... | CVSS3: 6.1 | 1% Низкий | больше 8 лет назад |
 | BDU:2021-00234 Уязвимость браузера Mozilla Firefox, связанная с игнорированием ведущих символов javascript в адресной строке, позволяющая нарушителю проводить межсайтовые сценарные атаки | CVSS3: 6.1 | 1% Низкий | около 9 лет назад |
| ALT-PU-2017-2739 ALT-PU-2017-2739: package `firefox` update to version 57.0.1-alt1 | CVSS3: 9.8 | почти 9 лет назад | |
| ALT-PU-2018-1854 ALT-PU-2018-1854: package `firefox-esr` update to version 60.0.1-alt1 | CVSS3: 9.8 | больше 8 лет назад |
Уязвимостей на страницу