Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2020-15660
8.8
HIGHCVSS v3
Severity scale
010
Description
Missing checks on Content-Type headers in geckodriver before 0.27.0 could lead to a CSRF vulnerability, that might, when paired with a specifically prepared request, lead to remote code execution.
mozilla/geckodriver
GitHubWebDriver Classic proxy for automating Firefox through Marionette
GitHubWebDriver Classic proxy for automating Firefox through Marionette< 0.27.0NVD