Debian/ublock-origin: medium 6.1
Cross Site Scripting (XSS) vulnerability in uBlock Origin extension before 1.41.1 allows remote attackers to run arbitrary code via a spoofed 'MessageSender.url' to the browser renderer process.
Action: Upgrade ublock-origin to 1.42.0+dfsg-1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.42.0+dfsg-1 | - |
Fixed versions
| 1.42.0+dfsg-1 |
Sources
- osv: DEBIAN-CVE-2022-32308#Debian:13/ublock-origin
- https://security-tracker.debian.org/tracker/CVE-2022-32308
published · modified · JSON