critical9.8
CVE-2018-16983
NoScript Classic before 5.1.8.7, as used in Tor Browser 7.x and other products, allows attackers to bypass script blocking via the text/html;/json Content-Type…
Impact
NoScript Classic before 5.1.8.7, as used in Tor Browser 7.x and other products, allows attackers to bypass script blocking via the text/html;/json Content-Type value.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Noscript | Noscript | before 5.1.8.7 |
| Torproject | Tor Browser | from 7.0.0 through 7.0.11 |
References
- NVD record
- CVE.org record
- https://noscript.net/getit#classic
- https://twitter.com/Zerodium/status/1039127214602641409
- https://www.zdnet.com/article/exploit-vendor-drops-tor-browser-zero-day-on-twitter/
- https://noscript.net/getit#classic
- https://twitter.com/Zerodium/status/1039127214602641409
- https://www.zdnet.com/article/exploit-vendor-drops-tor-browser-zero-day-on-twitter/