When pasting a <style>... CVE-2019-17016

- AV AC AU C I A
发布: 2019-09-30
修订: 2020-07-23

When pasting a &lt;style&gt; tag from the clipboard into a rich text editor, the CSS sanitizer incorrectly rewrites a @namespace rule. This could allow for injection into certain types of websites resulting in data exfiltration. This vulnerability affects Firefox ESR < 68.4 and Firefox < 72.

0%
暂无可用Exp或PoC
产品及版本信息(CPE)暂不可用