Lucene search
+L

1 matches found

osv-mgasa
osv-mgasa
•added 2022/09/21 6:15 p.m.•20 views

MGASA-2022-0344 Updated firefox packages fix security vulnerabilities

When injecting an HTML base element, some requests would ignore the CSP's base-uri settings and accept the injected element's base instead CVE-2022-40956. By injecting a cookie with certain special characters, an attacker on a shared subdomain which is not a secure context could set and thus...

8.8CVSS8.1AI score0.01407EPSS
SaveExploits0References6
Rows per page
Query Builder