Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The nsXMLHttpRequest::NotifyEventListeners method in Firefox 3.x before 3.0.4, Firefox 2.x before 2.0.0.18, Thunderbird 2.x before 2.0.0.18, and SeaMonkey 1.x before 1.1.13 allows remote attackers to bypass the same-origin policy and execute arbitrary script via multiple listeners, which bypass the inner window check.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Mozilla Firefox 'nsXMLHttpRequest::NotifyEventListeners'方式权限许可和访问控制漏洞
Vulnerability Description
Firefox中的nsXMLHttpRequest::NotifyEventListeners方式存在权限许可和访问控制漏洞。远程攻击者借助多个可以绕过内部窗口检查的listeners, 来绕过同源政策和运行任意脚本。
CVSS Information
N/A
Vulnerability Type
N/A