Lucene search

K
mozillaMozilla FoundationMFSA2008-38
HistorySep 23, 2008 - 12:00 a.m.

nsXMLDocument::OnChannelRedirect() same-origin violation — Mozilla

2008-09-2300:00:00
Mozilla Foundation
www.mozilla.org
21

0.021 Low

EPSS

Percentile

89.3%

Mozilla security researcher moz_bug_r_a4 reported that the same-origin check in nsXMLDocument::OnChannelRedirect() could be bypassed. This vulnerability could be used to execute JavaScript in the context of a different website.