Veracode Vulnerability DatabaseVERACODE:42355Cross-Site Scripting (XSS)
6.1 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
0.001 Low
EPSS
Percentile
24.1%
firefox is vulnerable to Cross-Site Scripting (XSS) attacks. This vulnerability occurs due to a flaw in the way that Firefox handles data: URLs. An attacker can exploit this vulnerability to load a malicious document in the same process as a trusted document, bypassing the site-isolation protections that are designed to prevent cross-site attacks.
| CPE | Name | Operator | Version |
|---|---|---|---|
| firefox:sid | eq | 81.0-2 | |
| firefox:sid | eq | 83.0-1 | |
| firefox:sid | eq | 82.0.3-1 | |
| firefox:sid | eq | 81.0-2 | |
| firefox:sid | eq | 83.0-1 | |
| firefox:sid | eq | 82.0.3-1 |
Related
6.1 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
0.001 Low
EPSS
Percentile
24.1%