Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

redhat логотип

CVE-2022-28286

Опубликовано: 05 апр. 2022
Источник: redhat
CVSS3: 4.3
EPSS Низкий

Описание

Due to a layout change, iframe contents could have been rendered outside of its border. This could have led to user confusion or spoofing attacks. This vulnerability affects Thunderbird < 91.8, Firefox < 99, and Firefox ESR < 91.8.

The Mozilla Foundation Security Advisory describes this flaw as: Due to a layout change, iframe contents could have been rendered outside of its border. This could have led to user confusion or spoofing attacks.

Затронутые пакеты

ПлатформаПакетСостояниеРекомендацияРелиз
Red Hat Enterprise Linux 6firefoxOut of support scope
Red Hat Enterprise Linux 6thunderbirdOut of support scope
Red Hat Enterprise Linux 9firefoxNot affected
Red Hat Enterprise Linux 9thunderbirdNot affected
Red Hat Enterprise Linux 7firefoxFixedRHSA-2022:128408.04.2022
Red Hat Enterprise Linux 7thunderbirdFixedRHSA-2022:130211.04.2022
Red Hat Enterprise Linux 8firefoxFixedRHSA-2022:128708.04.2022
Red Hat Enterprise Linux 8thunderbirdFixedRHSA-2022:130111.04.2022
Red Hat Enterprise Linux 8.1 Update Services for SAP SolutionsfirefoxFixedRHSA-2022:128308.04.2022
Red Hat Enterprise Linux 8.1 Update Services for SAP SolutionsthunderbirdFixedRHSA-2022:130311.04.2022

Показывать по

Дополнительная информация

Статус:

Low
Дефект:
CWE-1021
https://bugzilla.redhat.com/show_bug.cgi?id=2072564Mozilla: iframe contents could be rendered outside the border

EPSS

Процентиль: 41%
0.00194
Низкий

4.3 Medium

CVSS3

Связанные уязвимости

CVSS3: 5.4
ubuntu
около 3 лет назад

Due to a layout change, iframe contents could have been rendered outside of its border. This could have led to user confusion or spoofing attacks. This vulnerability affects Thunderbird < 91.8, Firefox < 99, and Firefox ESR < 91.8.

CVSS3: 5.4
nvd
около 3 лет назад

Due to a layout change, iframe contents could have been rendered outside of its border. This could have led to user confusion or spoofing attacks. This vulnerability affects Thunderbird < 91.8, Firefox < 99, and Firefox ESR < 91.8.

CVSS3: 5.4
debian
около 3 лет назад

Due to a layout change, iframe contents could have been rendered outsi ...

CVSS3: 5.4
github
около 3 лет назад

Due to a layout change, iframe contents could have been rendered outside of its border. This could have led to user confusion or spoofing attacks. This vulnerability affects Thunderbird < 91.8, Firefox < 99, and Firefox ESR < 91.8.

CVSS3: 4.3
fstec
почти 4 года назад

Уязвимость изолированной среды iframe веб-браузеров Firefox, Firefox ESR и почтового клиента Thunderbird, позволяющая нарушителю раскрыть защищаемую информацию

EPSS

Процентиль: 41%
0.00194
Низкий

4.3 Medium

CVSS3