Beveiligingsadvies

CVE-2021-23974

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2021-02-26 01:51:50
Laatst bijgewerkt 2024-08-03 19:14:09
Toegewezen door mozilla
CVSS-score geen score
Status PUBLISHED

Beschrijving

The DOMParser API did not properly process '<noscript>' elements for escaping. This could be used as an mXSS vector to bypass an HTML Sanitizer. This vulnerability affects Firefox < 86.