ALT-PU-2023-1156-1

Package update firefox-ublock_origin in branch sisyphus

Version1.46.0-alt1

Published2023-01-31

Max severityMEDIUM

Severity:

Closed issues (1)

MEDIUM6.1

Cross Site Scripting (XSS) vulnerability in uBlock Origin extension before 1.41.1 allows remote attackers to run arbitrary code via a spoofed 'MessageSender.url' to the browser renderer process.

Published: 2022-07-13Modified: 2024-11-21

CVSS 3.xMEDIUM 6.1

CVSS:3.x/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

References