description: A remote web page could inject arbitrary HTML code into the Oculus Browser UI, allowing an attacker to spoof UI and potentially execute code. This affects the Oculus Browser starting from version 5.2.7 until 5.7.11.
problem types: Improper Neutralization of Special Elements in Output Used by a Downstream Component (CWE-74)
affected:
{
product: Oculus Browser
vendor: Oculus
versions:
status: affected, version: 5.7.11
lessThan: unspecified, status: affected, version: 5.2.7, versionType: custom
lessThan: 5.2.7, status: unaffected, version: unspecified, versionType: custom
}