CVE-2022-34473

Name of the Vulnerable Software and Affected Versions Mozilla Firefox versions prior to 102

Description The issue is related to errors in HTML sanitization. It may allow a remote attacker to compromise the integrity of protected information. The HTML Sanitizer incorrectly failed to sanitize xlink:href attributes of SVG <use> tags.

Recommendations For versions prior to 102, update to version 102 or later to resolve the issue. As a temporary workaround, consider restricting the use of SVG <use> tags with xlink:href attributes until a patch is available.