CVE-2009-2472

MEDIUM · CVSS 4.3 EPSS 2.24%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2009-07-22 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

CVE

CVE-2009-2472

Severity

MEDIUM

CVSS

4.3

EPSS

2.24%

Firefox

Original NVD Description

Mozilla Firefox before 3.0.12 does not always use XPCCrossOriginWrapper when required during object construction, which allows remote attackers to bypass the Same Origin Policy and conduct cross-site scripting (XSS) attacks via a crafted document, related to a "cross origin wrapper bypass."