← Database

CVE-2022-34473

MEDIUM CVSS: 6.1 Published: 2022-12-22 Modified: 2026-06-17

Description

The HTML Sanitizer should have sanitized the href attribute of SVG <use> tags; however it incorrectly did not sanitize xlink:href attributes. This vulnerability affects Firefox < 102.

Affected Platforms

Mozilla Firefox

Weakness Type

CWE-79, CWE-79

References