Lucene search

K
prionPRIOn knowledge basePRION:CVE-2017-7808
HistoryJun 11, 2018 - 9:29 p.m.

Path traversal

2018-06-1121:29:00
PRIOn knowledge base
www.prio-n.com
5

6.2 Medium

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

55.8%

A content security policy (CSP) “frame-ancestors” directive containing origins with paths allows for comparisons against those paths instead of the origin. This results in a cross-origin information leak of this path information. This vulnerability affects Firefox < 55.

CPENameOperatorVersion
firefoxlt55.0

6.2 Medium

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

55.8%