{
  "cveId": "CVE-2022-31743",
  "url": "https://patchblox.com/security/cve/CVE-2022-31743",
  "summary": "CVE-2022-31743 is fixed in 5 products on 2 platforms, first by Mozilla Firefox (en-US) 101.0, released May 31, 2022. It is not reported as exploited. Patch Radar priority: Routine.",
  "title": "Mozilla Firefox ESR and 2 others: Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)",
  "description": "Firefox\u0027s HTML parser did not correctly interpret HTML comment tags, resulting in an incongruity with other browsers. This could have been used to escape HTML comments on pages that put user-controlled data in them. This vulnerability affects Firefox \u003C 101.",
  "published": "2022-05-31T17:00:00Z",
  "severity": "Medium",
  "cvss": 6.5,
  "cwe": "CWE-79: Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)",
  "epss": 0.0046,
  "epssPercentile": 0.40167,
  "priority": "Routine",
  "priorityTier": 4,
  "exploited": false,
  "vendorExploited": false,
  "disclosed": false,
  "vendorAdvisory": "https://nvd.nist.gov/vuln/detail/CVE-2022-31743",
  "fixes": [
    {
      "platform": "windows-app",
      "product": "Mozilla Firefox (en-US)",
      "fixedVersion": "101.0",
      "fix": "Mozilla Firefox (en-US) 101.0",
      "url": "https://patchblox.com/security/fix/windows-app/mozilla.firefox-101.0",
      "released": "2022-05-31T00:00:00Z"
    },
    {
      "platform": "windows-app",
      "product": "Mozilla Firefox ESR (en-US)",
      "fixedVersion": "102.0",
      "fix": "Mozilla Firefox ESR (en-US) 102.0",
      "url": "https://patchblox.com/security/fix/windows-app/mozilla.firefox.esr-102.0",
      "released": "2022-06-23T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "firefox",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "101.0.1\u002Bbuild1-0ubuntu0.18.04.1",
      "fix": "firefox 101.0.1\u002Bbuild1-0ubuntu0.18.04.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-firefox-101.0.1-build1-0ubuntu0.18.04.1",
      "released": "2022-05-31T17:00:00Z"
    },
    {
      "platform": "linux",
      "product": "firefox",
      "release": "Ubuntu 20.04 LTS (focal)",
      "fixedVersion": "101.0.1\u002Bbuild1-0ubuntu0.20.04.1",
      "fix": "firefox 101.0.1\u002Bbuild1-0ubuntu0.20.04.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-focal-firefox-101.0.1-build1-0ubuntu0.20.04.1",
      "released": "2022-05-31T17:00:00Z"
    },
    {
      "platform": "linux",
      "product": "firefox-geckodriver",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "101.0.1\u002Bbuild1-0ubuntu0.18.04.1",
      "fix": "firefox-geckodriver 101.0.1\u002Bbuild1-0ubuntu0.18.04.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-firefox-geckodriver-101.0.1-build1-0ubuntu0.18.04.1",
      "released": "2022-05-31T17:00:00Z"
    },
    {
      "platform": "linux",
      "product": "firefox-geckodriver",
      "release": "Ubuntu 20.04 LTS (focal)",
      "fixedVersion": "101.0.1\u002Bbuild1-0ubuntu0.20.04.1",
      "fix": "firefox-geckodriver 101.0.1\u002Bbuild1-0ubuntu0.20.04.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-focal-firefox-geckodriver-101.0.1-build1-0ubuntu0.20.04.1",
      "released": "2022-05-31T17:00:00Z"
    },
    {
      "platform": "linux",
      "product": "firefox-mozsymbols",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "101.0.1\u002Bbuild1-0ubuntu0.18.04.1",
      "fix": "firefox-mozsymbols 101.0.1\u002Bbuild1-0ubuntu0.18.04.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-firefox-mozsymbols-101.0.1-build1-0ubuntu0.18.04.1",
      "released": "2022-05-31T17:00:00Z"
    },
    {
      "platform": "linux",
      "product": "firefox-mozsymbols",
      "release": "Ubuntu 20.04 LTS (focal)",
      "fixedVersion": "101.0.1\u002Bbuild1-0ubuntu0.20.04.1",
      "fix": "firefox-mozsymbols 101.0.1\u002Bbuild1-0ubuntu0.20.04.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-focal-firefox-mozsymbols-101.0.1-build1-0ubuntu0.20.04.1",
      "released": "2022-05-31T17:00:00Z"
    }
  ],
  "noFixYet": [],
  "dataAsOf": "2026-11-09T01:18:40Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}