CVE-2022-22757: Medium severity firefox vulnerability
Remote Agent, used in WebDriver, did not validate the Host or Origin headers. This could have allowed websites to connect back locally to the user's browser to control it. <br>This bug only affected Firefox when WebDriver was enabled, which is not the default configuration.. This vulnerability affects Firefox < 97.
Other sources
Remote Agent, used in WebDriver, did not validate the Host or Origin headers. This could have allowed websites to connect back locally to the user's browser to control it. This bug only affected Firefox when WebDriver was enabled, which is not the default configuration.
— Mozilla
Affected Software
Event History
Peer vulnerabilities
Found alongside the following vulnerabilities.
Frequently Asked Questions
What is the severity of CVE-2022-22757?
CVE-2022-22757 is considered to be of moderate severity due to its potential for remote code execution under specific circumstances.
How do I fix CVE-2022-22757?
To fix CVE-2022-22757, users should update to the latest version of Mozilla Firefox beyond version 97.
Who is affected by CVE-2022-22757?
CVE-2022-22757 primarily affects users of Mozilla Firefox version 97 or earlier when WebDriver is enabled.
What type of vulnerability is CVE-2022-22757?
CVE-2022-22757 is a web security vulnerability related to improper validation of Host or Origin headers in WebDriver.
Can CVE-2022-22757 lead to data breaches?
Yes, CVE-2022-22757 could potentially allow unauthorized access to the user's browser, leading to data breaches.