← Database

CVE-2022-36315

MEDIUM CVSS: 4.3 Published: 2022-12-22 Modified: 2026-06-17

Description

When loading a script with Subresource Integrity, attackers with an injection capability could trigger the reuse of previously cached entries with incorrect, different integrity metadata. This vulnerability affects Firefox < 103.

Affected Platforms

Mozilla Firefox

Weakness Type

NVD-CWE-noinfo, CWE-345

References