Geckodriver (Mozilla) - vulnerabilities (CVEs)

2 CVEs, 0 in the last 30 days, 39 known versions, newest CVE from 2022-05-02. Vendor: Mozilla.

CVEs of Geckodriver

• CVE-2021-4138 - CVSS 5.3 (medium), 2022-05-02: Improved Host header checks to reject requests not sent to a well-known local hostname or IP, or the server-specified hostname.
• CVE-2020-15660 - CVSS 8.8 (high), 2021-07-20: Missing checks on Content-Type headers in geckodriver before 0.27.0 could lead to a CSRF vulnerability, that might, when paired with a specifically prepared…