Beveiligingsadvies

CVE-2017-7834

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2018-06-11 21:00:00

Laatst bijgewerkt 2024-08-05 16:19:28

Toegewezen door mozilla

CVSS-score geen score

Status PUBLISHED

Beschrijving

A "data:" URL loaded in a new tab did not inherit the Content Security Policy (CSP) of the original page, allowing for bypasses of the policy including the execution of JavaScript. In prior versions when "data:" documents also inherited the context of the original page this would allow for potential cross-site scripting (XSS) attacks. This vulnerability affects Firefox < 57.

← Alle CVE's bekijken Bekijk op cve.org ↗