Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
NoScript Classic before 5.1.8.7, as used in Tor Browser 7.x and other products, allows attackers to bypass script blocking via the text/html;/json Content-Type value.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Tor Browser NoScript Classic 安全漏洞
Vulnerability Description
Tor Browser是Torproject团队推出的一款基于macOS和Linux平台的能够匿名访问互联网的浏览器。NoScript Classic是其中的一个使用在浏览器中用于阻止恶意脚本的工具。 Tor Browser 7.x版本和其他产品中使用的NoScript Classic 5.1.8.7之前版本存在安全漏洞。攻击者可借助值为text/html;/json的Content-Type利用该漏洞绕过安全限制,执行任意的JavaScript代码。
CVSS Information
N/A
Vulnerability Type
N/A