Lucene search

K
mozillaMozilla FoundationMFSA2008-62
HistoryDec 16, 2008 - 12:00 a.m.

Additional XSS attack vectors in feed preview — Mozilla

2008-12-1600:00:00
Mozilla Foundation
www.mozilla.org
8

0.017 Low

EPSS

Percentile

87.8%

Mozilla security researcher moz_bug_r_a4 reported an additional variation on the feed preview vulnerabilities fixed in Firefox 2.0.0.17. moz_bug_r_a4 demonstrated that it was still possible to use the feed preview as a vector for JavaScript privilege escalation. An attacker could use this issue to run arbitrary JavaScript with chrome privileges.

CPENameOperatorVersion
firefoxlt2.0.0.19