TI-2009-02874 CVE-2009-3017 · GHSA-5h56-hp83-f22q
Orca Browser 1.2 build 5 does not properly block data: URIs in Refresh and Location…
Priority LOW 22
Orca Browser 1.2 build 5 does not properly block data: URIs in Refresh and Location headers in HTTP responses, which allows remote attackers to conduct cross-site scripting (XSS) attacks via vectors related to (1) inject…