CVE-2017-7831

2018-06-1121:00:00

mozilla

www.cve.org

6.4 Medium

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

60.0%

JSON

A vulnerability where the security wrapper does not deny access to some exposed properties using the deprecated “exposedProps” mechanism on proxy objects. These properties should be explicitly unavailable to proxy objects. This vulnerability affects Firefox < 57.

CNA Affected

[
  {
    "product": "Firefox",
    "vendor": "Mozilla",
    "versions": [
      {
        "lessThan": "57",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  }
]