CVE-2011-2369 — Cross-site Scripting in Mozilla Firefox

CWE-79 — Cross-site Scripting6 documents4 sources
Severity
4.3MEDIUMNVD
EPSS
0.3%
top 51.03%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Mozilla Firefox
Timeline
PublishedJun 30
Latest updateMay 17

Description

Cross-site scripting (XSS) vulnerability in Mozilla Firefox 4.x through 4.0.1 allows remote attackers to inject arbitrary web script or HTML via an SVG element containing an HTML-encoded entity.

CVSS vector

AV:N/AC:M/C:N/I:P/A:NExploitability: 8.6 | Impact: 2.9

Affected Packages1 packages

▶NVDmozilla/firefox4.0, 4.0.1+1

🔴Vulnerability Details

1
GHSA
GHSA-m3ch-2f5c-5pcw: Cross-site scripting (XSS) vulnerability in Mozilla Firefox 4↗2022-05-17
▶

💥Exploits & PoCs

1
Exploit-DB
RealVNC - Authentication Bypass (Metasploit)↗2011-08-26
▶

📋Vendor Advisories

3
Ubuntu
Firefox regression↗2011-06-23
▶
Ubuntu
mozvoikko, ubufox, webfav update↗2011-06-22
▶
Ubuntu
Firefox vulnerabilities↗2011-06-22
▶