CVE:CVE-2022-31744
CNNVD:CNNVD-202205-4288
Mozilla Firefox是美国Mozilla基金会的一款开源Web浏览器。
Mozilla Firefox 100.0 到 100.0.2 版本存在跨站脚本漏洞，该漏洞源于在处理可通过内部 URI 访问的 CSS 样式表时出错。远程攻击者利用该漏洞可绕过实施的安全限制。
solution:Upgrade mozilla firefox to a higher version than 101.0,and avoid the version (,101.0); Upgrade mozilla firefox_esr to a higher version than 91.11,and avoid the version (,91.11); Upgrade mozilla thunderbird to a higher version than 91.11,and avoid the version (,91.11)