tocsin

Debian/firefox-esr: high 7.5

An attacker could, via a specially crafted multipart response, execute arbitrary JavaScript under the `resource://devtools` origin. This could allow them to access cross-origin JSON content. This acce

Action: Upgrade firefox-esr to 128.3.0esr-1~deb12u1 or later.

Affected

introducedfixedlast affected
0128.3.0esr-1~deb12u1-

Fixed versions

128.3.0esr-1~deb12u1

Sources

published · modified · JSON