CVE Database
/

CVE-2022-22757

Back to search

CVE-2022-22757

Published: Dec 22, 2022

Modified: Apr 16, 2025

PUBLISHED

Description

Remote Agent, used in WebDriver, did not validate the Host or Origin headers. This could have allowed websites to connect back locally to the user's browser to control it. <br>*This bug only affected Firefox when WebDriver was enabled, which is not the default configuration.*. This vulnerability affects Firefox < 97.

VendorProductVersions

Mozilla

Firefox

affected
unspecified - < 97

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now