PatchTheCVEfirebug vulnerabilities and fixes
Recent CVEs affecting firebug, with upgrade or downgrade steps. 2 tracked.
firebug has 2 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 1. Most recent: 2007-04-11. Highest priority: CVE-2007-1878 (score 52/100).
- CVE-2007-1947 LOW 3.5 UPGRADE Cross-zone scripting vulnerability in the DOM templates (domplates) used by the console.log function in the Fi
- CVE-2007-1878 MEDIUM 6.8 DOWNGRADE Cross-zone scripting vulnerability in the DOM templates (domplates) used by the console.log function in the Fi
FAQ
How do I fix firebug vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is firebug being exploited right now?
None of the tracked firebug CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which firebug CVE should I patch first?
CVE-2007-1878 currently ranks highest (52/100): Cross-zone scripting vulnerability in the DOM templates (domplates) used by the console.log function in the Fi.