CVE-2022-34475

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 102

Description The issue is related to errors in HTML sanitization. It could allow a remote attacker to execute arbitrary code if the attacker's input is sanitized via the HTML Sanitizer API and references a same-origin JavaScript file containing the script to be executed. The estimated number of potentially affected devices worldwide is not specified.

Recommendations For versions prior to 102, update to version 102 or later to resolve the issue. As a temporary workaround, consider restricting the use of the HTML Sanitizer API until a patch is available. Avoid using the HTML Sanitizer API to sanitize attacker input that references same-origin JavaScript files until the issue is resolved.