Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:38990
HistoryJan 24, 2023 - 8:59 p.m.

Remote Code Execution(RCE)

2023-01-2420:59:31
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
15
firefox
remote code execution
rce
vulnerability
external urls
exfiltration
malicious code
system security

0.001 Low

EPSS

Percentile

43.5%

firefox is vulnerable to Remote Code Execution(RCE). Regular expressions used to filter out forbidden properties and values from style directives in calls to console.log weren’t accounting for external URLs. Data could then be potentially exfiltrated from the browser which allows an attacker to upload and execute malicious code on the system under attack.