Lucene search

K
cvelistCanonicalCVELIST:CVE-2012-0958
HistoryOct 03, 2022 - 4:15 p.m.

CVE-2012-0958

2022-10-0316:15:41
canonical
www.cve.org
1
cve-2012-0958
same origin policy
remote attackers
sensitive information
api vulnerability
unity firefox extension

6 Medium

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

54.7%

content/unity-api.js in the unity-firefox-extension extension 2.4.1 for Firefox exposes the toDataURL function in an API call, which allows remote attackers to bypass the Same Origin Policy and obtain sensitive information via a crafted webpage.

6 Medium

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

54.7%