Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Mozilla Firefox 4.x through 13.0 and Firefox ESR 10.x before 10.0.6 do not properly establish the security context of a feed: URL, which allows remote attackers to bypass unspecified cross-site scripting (XSS) protection mechanisms via a feed:javascript: URL.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Mozilla Firefox/Firefox ESR 跨站脚本漏洞
Vulnerability Description
Mozilla Mozilla Firefox是美国Mozilla基金会开发的一款开源Web浏览器。 Mozilla Firefox 4.x版本至13.0版本以及Firefox ESR 10.0.6之前的10.x版本中存在漏洞,该漏洞源于未正确建立feed:URL的安全上下文。远程攻击者可利用该漏洞通过feed:javascript: URL绕过未指定的跨站脚本(XSS)保护机制。
CVSS Information
N/A
Vulnerability Type
N/A