CVE-2022-29909

Severity CVSS v4.0:
Pending analysis
Type:
Unavailable / Other
Publication date:
22/12/2022
Last modified:
16/04/2025

Description

Documents in deeply-nested cross-origin browsing contexts could have obtained permissions granted to the top-level origin, bypassing the existing prompt and wrongfully inheriting the top-level permissions. This vulnerability affects Thunderbird

Vulnerable products and versions

CPE From Up to
cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:* 100.0 (excluding)
cpe:2.3:a:mozilla:firefox_esr:*:*:*:*:*:*:*:* 91.9 (excluding)
cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:* 91.9 (excluding)