mozilla/geckodriver
GitHub
Releases48
Frequency2 months 3 weeks
Last Release
Stars7.48K
WebDriver Classic proxy for automating Firefox through Marionette
CVE History
| CVE | Affected | Published | CVSS v3 | CVSS v2 |
|---|---|---|---|---|
| < 0.30.0 | 5.3 MEDIUM | 5 MEDIUM | ||
Improved Host header checks to reject requests not sent to a well-known local hostname or IP, or the server-specified hostname. | ||||
| < 0.27.0 | 8.8 HIGH | 6.8 MEDIUM | ||
Missing checks on Content-Type headers in geckodriver before 0.27.0 could lead to a CSRF vulnerability, that might, when paired with a specifically prepared request, lead to remote code execution. | ||||