CVE-2018-16983
N/A
N/A
Summary
NoScript Classic before 5.1.8.7, as used in Tor Browser 7.x and other products, allows attackers to bypass script blocking via the text/html;/json Content-Type value.
Affected Software
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| n/a | n/a | n/a | affected |
Weaknesses
- n/a
ADP Enrichment
CVE Program Container
Additional References
- https://noscript.net/getit#classic
- https://twitter.com/Zerodium/status/1039127214602641409
- https://www.zdnet.com/article/exploit-vendor-drops-tor-browser-zero-day-on-twitter/
References
- https://noscript.net/getit#classic
- https://twitter.com/Zerodium/status/1039127214602641409
- https://www.zdnet.com/article/exploit-vendor-drops-tor-browser-zero-day-on-twitter/
Feedback
Was this page helpful?
Glad to hear it! Please tell us how we can improve.
Sorry to hear that. Please tell us how we can improve.