When pasting a <style>... CVE-2019-17016

4.3 AV AC AU C I A
发布: 2020-01-08
修订: 2020-01-13

When pasting a &lt;style&gt; tag from the clipboard into a rich text editor, the CSS sanitizer incorrectly rewrites a @namespace rule. This could allow for injection into certain types of websites resulting in data exfiltration. This vulnerability affects Firefox ESR < 68.4 and Firefox < 72.

0%
当前有9条漏洞利用/PoC
当前有17条受影响产品信息