tocsin

Alpine/firefox-esr: medium 6.1

Cross-Site Tracing occurs when a server will echo a request back via the Trace method, allowing an XSS attack to access to authorization headers and cookies inaccessible to JavaScript (such as cookies

Action: Upgrade firefox-esr to 102.5.0-r0 or later.

Affected

introducedfixedlast affected
0102.5.0-r0-

Fixed versions

102.5.0-r0

Sources

published · modified · JSON