← Database

CVE-2022-22757

MEDIUM CVSS: 6.5 Published: 2022-12-22 Modified: 2026-06-17

Description

Remote Agent, used in WebDriver, did not validate the Host or Origin headers. This could have allowed websites to connect back locally to the user's browser to control it.
*This bug only affected Firefox when WebDriver was enabled, which is not the default configuration.*. This vulnerability affects Firefox < 97.

Affected Platforms

Mozilla Firefox

Weakness Type

CWE-346, CWE-345

References