Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2023-06863
HistoryJun 02, 2022 - 12:00 a.m.

Mozilla Firefox Cross-Site Scripting Vulnerability (CNVD-2023-06863)

2022-06-0200:00:00
China National Vulnerability Database
www.cnvd.org.cn
10

6.5 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

Mozilla Firefox is an open source Web browser from the Mozilla Foundation, U.S. A cross-site scripting vulnerability exists in Mozilla Firefox, which stems from incorrect input validation when handling HTML comment tags. An attacker could use this vulnerability to launch a cross-site scripting attack.

CPENameOperatorVersion
mozilla firefoxlt101.0

6.5 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N