tocsin

Alpine/firefox-esr: medium 6.5

Through a series of API calls and redirects, an attacker-controlled alert dialog could have been displayed on another website (with the victim website's URL shown). This vulnerability affects Firefox

Action: Upgrade firefox-esr to 115.8.0-r0 or later.

Affected

introducedfixedlast affected
0115.8.0-r0-

Fixed versions

115.8.0-r0

Sources

published · modified · JSON