Lucene search
+L

1 matches found

OSV
OSV
added 2022/09/21 6:15 p.m.9 views

MGASA-2022-0344 Updated firefox packages fix security vulnerabilities

When injecting an HTML base element, some requests would ignore the CSP's base-uri settings and accept the injected element's base instead CVE-2022-40956. By injecting a cookie with certain special characters, an attacker on a shared subdomain which is not a secure context could set and thus...

8.8CVSS8.1AI score0.01342EPSS
SaveExploits0References6
Rows per page
Query Builder