description: A duplicate <code>SystemPrincipal</code> object could be created when parsing a non-system html document via <code>DOMParser::ParseFromSafeString</code>. This could have lead to bypassing web security checks. This vulnerability affects Firefox < 109.
problem types: Creation of duplicate SystemPrincipal from less secure contexts
affected:
{
vendor: Mozilla
product: Firefox
versions:
version: unspecified, lessThan: 109, status: affected, versionType: custom
}