Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:34109
HistoryFeb 09, 2022 - 7:00 a.m.

Remote Code Execution (RCE)

2022-02-0907:00:52
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
23
firefox
vulnerability
remote execution
iframe
sandbox
software

EPSS

0.002

Percentile

56.8%

firefox is vulnerable to remote code execution. The vulnerability exists due to the way iframes are handled by the browser allowing an attacker to execute maliciously crafted script via the iframe sandbox.