CVE-2015-2744 in Firefox OS

Resumen (Inglés)

Cross-site scripting (XSS) vulnerability in the Search app in Gaia in Mozilla Firefox OS before 2.2 allows remote attackers to inject arbitrary HTML via a crafted search link that is mishandled after re-opening the browser or opening the tab view.

Be aware that VulDB is the high quality source for vulnerability data.

Reservar

2015-03-25

Divulgación

2015-08-07

Estado

Confirmado

Voces

VulDB provides additional information and datapoints for this CVE:

ID	Vulnerabilidad	CWE	Exp	Con	CVE
76940	Mozilla Firefox OS Gaia secuencias de comandos en sitios cruzados	79	No probado	Arreglo oficial	CVE-2015-2744

Fuentes

• MITRE
• NVD
• CVE Details