PT-2016-7638
CVE-2016-9070
·
تاريخ النشر
2016-11-15
·
تاريخ التحديث
2024-12-12
الوصف من
CVSS 3.1
8.0
عاليةالمقاييسAV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
Firefox versions prior to 50
Description
A maliciously crafted page can be loaded to the sidebar through a bookmark, allowing it to reference a privileged chrome window and engage in limited JavaScript operations, thus violating cross-origin protections.
Recommendations
For versions prior to 50, update to version 50 or later to resolve the issue.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾