CVE-2022-1802 PoC — 多款Mozilla产品代码注入漏洞

Source

https://github.com/mistymntncop/CVE-2022-1802

Associated Vulnerability

Title:多款Mozilla产品代码注入漏洞 (CVE-2022-1802)
Description:If an attacker was able to corrupt the methods of an Array object in JavaScript via prototype pollution, they could have achieved execution of attacker-controlled JavaScript code in a privileged context. This vulnerability affects Firefox ESR < 91.9.1, Firefox < 100.0.2, Firefox for Android < 100.3.0, and Thunderbird < 91.9.1.

Readme

# CVE-2022-1802 + CVE-2022-1529 + CVE-2022-2200
Tested against Firefox 100.0.1 (Windows)
https://ftp.mozilla.org/pub/firefox/releases/100.0.1/win64/en-US/Firefox%20Setup%20100.0.1.exe

File Snapshot


 [4.0K]  /data/pocs/cb1878e8abe1e8b95fc3cd17fb6570472764883e
├── [  68]  1.mjs
├── [  50]  2.mjs
├── [ 329]  crash.html
├── [ 13K]  exploit.html
├── [9.9K]  exploit.js
└── [ 185]  README.md

0 directories, 6 files

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →

Goal Reached Thanks to every supporter — we hit 100%!