Remote Code Execution (RCE)

🗓️ 11 Feb 2022 19:16:52Reported by Veracode Vulnerability DatabaseType

veracode🔗 sca.analysiscenter.veracode.com👁 46 Views

firefox RCE vulnerability due to same-origin policy lack of validation with XSL transform

Reporter	Title	Published	Views	Family All 50
AlpineLinux	CVE-2022-22755	22 Dec 202200:00	–	alpinelinux
AstraLinux	Astra Linux - уязвимость в firefox	20 May 202605:53	–	astralinux
CNNVD	Mozilla Firefox 安全漏洞	8 Feb 202200:00	–	cnnvd
CNVD	Mozilla Firefox Resource Misuse Vulnerability	30 Dec 202200:00	–	cnvd
CVE	CVE-2022-22755	22 Dec 202200:00	–	cve
Cvelist	CVE-2022-22755	22 Dec 202200:00	–	cvelist
Debian CVE	CVE-2022-22755	22 Dec 202200:00	–	debiancve
EUVD	EUVD-2022-27898	3 Oct 202520:07	–	euvd
Tenable Nessus	GLSA-202202-03 : Mozilla Firefox: Multiple vulnerabilities	17 Mar 202200:00	–	nessus
Tenable Nessus	Mozilla Firefox < 97.0	8 Feb 202200:00	–	nessus

Vulners

Node

mozilla firefoxMatch82.0.3-1debian

AND

mozilla firefoxMatch81.0-2debian

AND

mozilla firefoxMatch83.0-1debian

AND

debian debian_linuxMatch999

mozilla firefoxMatch74.0.1-r0os

AND

mozilla firefoxMatch75.0-r1os

AND

mozilla firefoxMatch87.0-r0os

AND

mozilla firefoxMatch89.0-r0os

AND

mozilla firefoxMatch74.0-r1os

AND

mozilla firefoxMatch94.0-r0os

AND

mozilla firefoxMatch75.0-r2os

AND

mozilla firefoxMatch90.0.2-r0os

AND

mozilla firefoxMatch90.0-r0os

AND

mozilla firefoxMatch76.0.1-r1os

AND

mozilla firefoxMatch76.0-r0os

AND

mozilla firefoxMatch76.0.1-r0os

AND

mozilla firefoxMatch85.0.2-r0os

AND

mozilla firefoxMatch88.0-r0os

AND

mozilla firefoxMatch85.0.2-r1os

AND

mozilla firefoxMatch89.0.1-r1os

AND

mozilla firefoxMatch89.0.2-r0os

AND

mozilla firefoxMatch94.0.2-r0os

AND

mozilla firefoxMatch95.0-r0os

AND

mozilla firefoxMatch73.0.1-r1os

AND

mozilla firefoxMatch89.0.1-r0os

AND

mozilla firefoxMatch93.0-r1os

AND

mozilla firefoxMatch88.0.1-r0os

AND

mozilla firefoxMatch95.0.1-r0os

AND

alpinelinux alpine_linuxMatchedge

google bionicMatch80.0.1+build1-0ubuntu0.18.04.1debian

AND

google bionicMatch83.0+build2-0ubuntu0.18.04.2debian

AND

google bionicMatch59.0.2+build1-0ubuntu1debian

AND

google bionicMatch92.0+build3-0ubuntu0.18.04.1debian

AND

google bionicMatch80.0+build2-0ubuntu0.18.04.1debian

AND

debian debian_linux

focal focalMatch80.0.1+build1-0ubuntu0.20.04.1debian

AND

focal focalMatch75.0+build3-0ubuntu1debian

AND

focal focalMatch83.0+build2-0ubuntu0.20.04.1debian

AND

focal focalMatch80.0+build2-0ubuntu0.20.04.1debian

AND

debian debian_linux

devel develMatch86.0+build3-0ubuntu1debian

AND

devel develMatch83.0+build2-0ubuntu1debian

AND

devel develMatch78.0.1+build1-0ubuntu1debian

AND

devel develMatch80.0.1+build1-0ubuntu1debian

AND

devel develMatch81.0+build1-0ubuntu1debian

AND

debian debian_linux

Source	Link
security-tracker	www.security-tracker.debian.org/tracker/CVE-2022-22755
bugzilla	www.bugzilla.mozilla.org/show_bug.cgi
mozilla	www.mozilla.org/security/advisories/mfsa2022-04/

30 Dec 2022 01:20Current

2.7Low risk

Vulners AI Score2.7

CVSS 3.18.8

EPSS0.00718