Description (CNA)
NoScript Classic before 5.1.8.7, as used in Tor Browser 7.x and other products, allows attackers to bypass script blocking via the text/html;/json Content-Type value.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| n/a / n/a | affected n/a |
CWE
No CWE identifiers supplied.
References
- https://noscript.net/getit#classic
- https://twitter.com/Zerodium/status/1039127214602641409
- https://www.zdnet.com/article/exploit-vendor-drops-tor-browser-zero-day-on-twitter/
ADP enrichment
No English description supplied.