Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The W3C High Resolution Time API, as implemented in various web browsers, does not consider that memory-reference times can be measured by a performance.now "Time to Tick" approach even with the https://bugzilla.mozilla.org/show_bug.cgi?id=1167489#c9 protection mechanism in place, which makes it easier for remote attackers to conduct AnC attacks via crafted JavaScript code.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
W3C High Resolution Time API 安全漏洞
Vulnerability Description
W3C High Resolution Time API是一套用于为Web应用提供亚毫秒级(sub-millisecond)解析度的当前时间格式的JavaScript接口。 W3C High Resolution Time API中存在安全漏洞。攻击者可借助特制的JavaScript代码利用该漏洞实施AnC攻击。
CVSS Information
N/A
Vulnerability Type
N/A