漏洞信息
尽管我们使用了先进的大模型技术，但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性，但请您根据实际情况进行核实和判断。
Vulnerability Title
N/A
Vulnerability Description
Mozilla Firefox 3.0.13 and earlier, 3.5, 3.6 a1 pre, and 3.7 a1 pre; SeaMonkey 1.1.17; and Mozilla 1.7.x and earlier do not properly block data: URIs in Refresh headers in HTTP responses, which allows remote attackers to conduct cross-site scripting (XSS) attacks via vectors related to (1) injecting a Refresh header that contains JavaScript sequences in a data:text/html URI or (2) entering a data:text/html URI with JavaScript sequences when specifying the content of a Refresh header. NOTE: in some product versions, the JavaScript executes outside of the context of the HTTP site.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Mozilla Firefox 跨站脚本攻击漏洞
Vulnerability Description
Mozilla Firefox是美国Mozilla基金会的一款开源Web浏览器。 Mozilla Firefox 3.0.13及之前版本存在跨站脚本漏洞，该漏洞源于没有在HTTP响应中正确的拦截刷新眉首中的数据:URIs，这使得远程攻击者可以借助一些向量，执行跨站脚本攻击。这些向量涉及(1)注入一个包含data:text/html URI中的JavaScript序列的刷新头或(2)在详细说明刷新头的内容时，借助JavaScript序列输入一个data:text/html URI。
CVSS Information
N/A
Vulnerability Type
N/A