CVE-2022-31743

Summary

Firefox's HTML parser did not correctly interpret HTML comment tags, resulting in an incongruity with other browsers. This could have been used to escape HTML comments on pages that put user-controlled data in them. This vulnerability affects Firefox < 101.

Affected Software

Weaknesses

• HTML Parsing incorrectly ended HTML comments prematurely

ADP Enrichment

CVE Program Container

Additional References

• https://www.mozilla.org/security/advisories/mfsa2022-20/
• https://bugzilla.mozilla.org/show_bug.cgi?id=1747388

CISA ADP Vulnrichment

• SSVC:
• Exploitation: poc
  • Automatable: no
  • Technical Impact: partial

Additional References

• https://bugzilla.mozilla.org/show_bug.cgi?id=1747388

References

• https://www.mozilla.org/security/advisories/mfsa2022-20/
• https://bugzilla.mozilla.org/show_bug.cgi?id=1747388

• ←Previous
• Next→