CVE-2022-2200 — Prototype Pollution in Mozilla Firefox
Severity
8.8HIGHNVD
OSV6.5
EPSS
6.2%
top 9.11%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedDec 22
Description
If an object prototype was corrupted by an attacker, they would have been able to set undesired attributes on a JavaScript object, leading to privileged code execution. This vulnerability affects Firefox < 102, Firefox ESR < 91.11, Thunderbird < 102, and Thunderbird < 91.11.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:HExploitability: 2.8 | Impact: 5.9
Affected Packages9 packages
🔴Vulnerability Details
5OSV▶
CVE-2022-2200: If an object prototype was corrupted by an attacker, they would have been able to set undesired attributes on a JavaScript object, leading to privileg↗2022-12-22
CVEList▶
CVE-2022-2200: If an object prototype was corrupted by an attacker, they would have been able to set undesired attributes on a JavaScript object, leading to privileg↗2022-12-22
GHSA▶
GHSA-8mqx-qm24-g4fh: If an object prototype was corrupted by an attacker, they would have been able to set undesired attributes on a JavaScript object, leading to privileg↗2022-12-22
📋Vendor Advisories
7Debian▶
CVE-2022-2200: firefox - If an object prototype was corrupted by an attacker, they would have been able t...↗2022