Thursday, February 10, 2022

MFSA2022-04 Firefox: Security Vulnerabilities fixed in Firefox 97 (CVE-2022-22755)

rapid7 vulnerabilities In: rapid7, vulnerabilities

Description
By using XSL Transforms, a malicious webserver could have served a user an XSL document that would continue to execute JavaScript (within the bounds of the same-origin policy) even after the tab was closed.
Solution(s)
mozilla-firefox-upgrade-97_0


Referenceshttps://attackerkb.com/topics/cve-2022-22755
CVE - 2022-22755
http://www.mozilla.org/security/announce/2022/mfsa2022-04.html