Lucene search
K

6 matches found

SUSE CVE
SUSE CVE
added 2023/02/15 3:24 a.m.1 views

SUSE CVE-2022-34475

SVG use tags that referenced a same-origin document could have resulted in script execution if attacker input was sanitized via the HTML Sanitizer API. This would have required the attacker to reference a same-origin JavaScript file containing the script to be executed. This vulnerability affects...

6.1CVSS8.4AI score0.00679EPSS
Exploits0References7
Prion
Prion
added 2022/12/22 8:15 p.m.15 views

Design/Logic Flaw

SVG use tags that referenced a same-origin document could have resulted in script execution if attacker input was sanitized via the HTML Sanitizer API. This would have required the attacker to reference a same-origin JavaScript file containing the script to be executed. This vulnerability affects...

5.8CVSS5.8AI score0.00679EPSS
Exploits0References2Affected Software1
Debian CVE
Debian CVE
added 2022/12/22 12:0 a.m.35 views

CVE-2022-34475

SVG use tags that referenced a same-origin document could have resulted in script execution if attacker input was sanitized via the HTML Sanitizer API. This would have required the attacker to reference a same-origin JavaScript file containing the script to be executed. This vulnerability affects...

6.1CVSS7.9AI score0.00679EPSS
Exploits0
CVE
CVE
added 2022/12/22 12:0 a.m.184 views

CVE-2022-34475

Mozilla Firefox vulnerability CVE-2022-34475 involves SVG tags referencing a same-origin document that could lead to script execution if attacker input is sanitized via the HTML Sanitizer API. Affected product: Firefox prior to version 102. Root cause: improper handling of in combination with s...

6.1CVSS6.6AI score0.00679EPSS
Exploits0References2Affected Software1
UbuntuCve
UbuntuCve
added 2022/07/05 12:0 a.m.26 views

CVE-2022-34475

SVG use tags that referenced a same-origin document could have resulted in script execution if attacker input was sanitized via the HTML Sanitizer API. This would have required the attacker to reference a same-origin JavaScript file containing the script to be executed. This vulnerability affects...

6.1CVSS6.8AI score0.00679EPSS
Exploits0References3
Veracode
Veracode
added 2022/06/30 9:53 p.m.25 views

Cross-Site Scripting (XSS)

firefox is vulnerable to cross-site scripting. The vulnerability exists because the user input of SVG tags that referenced a same-origin document is not properly sanitized which allows an attacker to inject and execute arbitrary javascript...

6.1CVSS7.8AI score0.00679EPSS
Exploits0References4Affected Software3
Rows per page
Query Builder