vulnerability

Alpine Linux: CVE-2022-46877: Cross-site Scripting

Try Surface Command

Back to search

Severity

CVSS

(AV:N/AC:M/Au:N/C:N/I:P/A:N)

Published

Dec 22, 2022

Added

Aug 22, 2024

Modified

Mar 25, 2026

Description

By confusing the browser, the fullscreen notification could have been delayed or suppressed, resulting in potential user confusion or spoofing attacks. This vulnerability affects Firefox < 108.

Solutions

alpine-linux-upgrade-firefox-esralpine-linux-upgrade-firefox

References

CVE-2022-46877
https://attackerkb.com/topics/CVE-2022-46877
https://security.alpinelinux.org/vuln/CVE-2022-46877
https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-49657
CWE-79
EUVD-EUVD-2022-49657

Rapid7 Labs

2026 Global Threat Landscape Report

The predictive window has collapsed. Exploitation follows disclosure in days. See how attackers are accelerating and how to stay ahead.

Get report