XSS vulnerability

[illiliti]

https://linux-hardware.org/?id=pci:14c3-0616-105b-e0cd%22%3E%3Cscript%3Ealert()%3C/script%3E
https://linux-hardware.org/?probe=9788a63f8a%22%3E%3Cscript%3Ealert()%3C/script%3E

same on bsd-hardware

[roke-julian-lockhart]

@illiliti, I am able to reproduce this:

This is dangerous, if someone appends ECMAScript that attempts to install a crypto-miner, on a vulnerable environment. Can we report this to anyone?

My Environment

1. Details

   #!/usr/bin/env pwsh
   rpm -qf (Get-Command firefox-nightly).Source --queryformat @'
   Name: %{NAME}
   Version: %{VERSION}
   Release: %{RELEASE}
   Architecture: %{ARCH}
   Install Date: %{INSTALLTIME:date}
   Size: %{SIZE}
   Signature: %{SIGPGP:pgpsig}
   Source RPM: %{SOURCERPM}
   Build Date: %{BUILDTIME:date}
   Build Host: %{BUILDHOST}
   Packager: %{PACKAGER}
   Vendor: %{VENDOR}
   '@ | yq -P

2. Name: firefox-nightly
   Version: 153.0a1
   Release: 20260608093228
   Architecture: x86_64
   Install Date: Tue 09 Jun 2026 17:33:29 BST
   Size: 389659876
   Signature: (none)
   Source RPM: firefox-nightly-153.0a1-20260608093228.src.rpm
   Build Date: Mon 08 Jun 2026 12:38:04 BST
   Build Host: 04134c35fa9e
   Packager: (none)
   Vendor: Mozilla