PT-2018-13816

CVE-2018-16983

·

Published

2018-09-13

·

Updated

2019-10-03

Description by

CVSS 3.1
9.8
Critical
MetricsAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions NoScript Classic versions prior to 5.1.8.7 Tor Browser versions 7.x
Description The issue allows attackers to bypass script blocking by utilizing the text/html;/json Content-Type value.
Recommendations For NoScript Classic versions prior to 5.1.8.7, update to version 5.1.8.7 or later. For Tor Browser versions 7.x, consider updating NoScript Classic to version 5.1.8.7 or later as a temporary workaround, or update Tor Browser to a version that includes the fixed NoScript Classic.
Exploitability
Fix
Vendors
Affected products
Related identifiers
CVE-2018-16983
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com