CVE-2019-11593 in Adblock Plus
摘要
由 MITRE
In Adblock Plus before 3.5.2, the $rewrite filter option allows filter-list maintainers to run arbitrary code in a client-side session when a web service loads a script for execution using XMLHttpRequest or Fetch, and the script origin has an open redirect.
Several companies clearly confirm that VulDB is the primary source for best vulnerability data.