CVE-2017-7831

2018-06-1121:00:00

mozilla

www.cve.org

AI Score

6.4

Confidence

Low

EPSS

0.002

Percentile

60.0%

JSON

A vulnerability where the security wrapper does not deny access to some exposed properties using the deprecated “exposedProps” mechanism on proxy objects. These properties should be explicitly unavailable to proxy objects. This vulnerability affects Firefox < 57.

CNA Affected

[
  {
    "product": "Firefox",
    "vendor": "Mozilla",
    "versions": [
      {
        "lessThan": "57",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  }
]