Medium severity6.5NVD Advisory· Published Dec 22, 2022· Updated Jun 17, 2026
CVE-2022-22757
CVE-2022-22757
Description
Remote Agent, used in WebDriver, did not validate the Host or Origin headers. This could have allowed websites to connect back locally to the user's browser to control it. *This bug only affected Firefox when WebDriver was enabled, which is not the default configuration.*. This vulnerability affects Firefox < 97.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
5unspecified+ 2 more
- (no CPE)range: unspecified
- (no CPE)range: <97
- cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*range: <97.0
- osv-coords2 versionspkg:rpm/opensuse/MozillaFirefox&distro=openSUSE%20Tumbleweedpkg:rpm/opensuse/firefox-esr&distro=openSUSE%20Tumbleweed
< 97.0-1.1+ 1 more
- (no CPE)range: < 97.0-1.1
- (no CPE)range: < 128.5.1-1.1
Patches
Vulnerability mechanics
References
2- bugzilla.mozilla.org/show_bug.cginvdIssue TrackingVendor Advisory
- www.mozilla.org/security/advisories/mfsa2022-04/nvdVendor Advisory
News mentions
0No linked articles in our index yet.