CVE-2022-29911

Severity CVSS v4.0:
Pending analysis
Type:
Unavailable / Other
Publication date:
22/12/2022
Last modified:
16/04/2025

Description

An improper implementation of the new iframe sandbox keyword allow-top-navigation-by-user-activation could lead to script execution without allow-scripts being present. This vulnerability affects Thunderbird

Vulnerable products and versions

CPE From Up to
cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:* 100.0 (excluding)
cpe:2.3:a:mozilla:firefox_esr:*:*:*:*:*:*:*:* 91.9 (excluding)
cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:* 91.9 (excluding)