Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

redhat логотип

CVE-2022-28286

Опубликовано: 05 апр. 2022
Источник: redhat
CVSS3: 4.3

Описание

Due to a layout change, iframe contents could have been rendered outside of its border. This could have led to user confusion or spoofing attacks. This vulnerability affects Thunderbird < 91.8, Firefox < 99, and Firefox ESR < 91.8.

The Mozilla Foundation Security Advisory describes this flaw as: Due to a layout change, iframe contents could have been rendered outside of its border. This could have led to user confusion or spoofing attacks.

Затронутые пакеты

ПлатформаПакетСостояниеРекомендацияРелиз
Red Hat Enterprise Linux 6firefoxOut of support scope
Red Hat Enterprise Linux 6thunderbirdOut of support scope
Red Hat Enterprise Linux 9firefoxNot affected
Red Hat Enterprise Linux 9thunderbirdNot affected
Red Hat Enterprise Linux 7firefoxFixedRHSA-2022:128408.04.2022
Red Hat Enterprise Linux 7thunderbirdFixedRHSA-2022:130211.04.2022
Red Hat Enterprise Linux 8firefoxFixedRHSA-2022:128708.04.2022
Red Hat Enterprise Linux 8thunderbirdFixedRHSA-2022:130111.04.2022
Red Hat Enterprise Linux 8.1 Update Services for SAP SolutionsfirefoxFixedRHSA-2022:128308.04.2022
Red Hat Enterprise Linux 8.1 Update Services for SAP SolutionsthunderbirdFixedRHSA-2022:130311.04.2022

Показывать по

Дополнительная информация

Статус:

Low
Дефект:
CWE-1021
https://bugzilla.redhat.com/show_bug.cgi?id=2072564Mozilla: iframe contents could be rendered outside the border

4.3 Medium

CVSS3

Связанные уязвимости

CVSS3: 5.4
ubuntu
больше 2 лет назад

Due to a layout change, iframe contents could have been rendered outside of its border. This could have led to user confusion or spoofing attacks. This vulnerability affects Thunderbird < 91.8, Firefox < 99, and Firefox ESR < 91.8.

CVSS3: 5.4
nvd
больше 2 лет назад

Due to a layout change, iframe contents could have been rendered outside of its border. This could have led to user confusion or spoofing attacks. This vulnerability affects Thunderbird < 91.8, Firefox < 99, and Firefox ESR < 91.8.

CVSS3: 5.4
debian
больше 2 лет назад

Due to a layout change, iframe contents could have been rendered outsi ...

CVSS3: 5.4
github
больше 2 лет назад

Due to a layout change, iframe contents could have been rendered outside of its border. This could have led to user confusion or spoofing attacks. This vulnerability affects Thunderbird < 91.8, Firefox < 99, and Firefox ESR < 91.8.

CVSS3: 4.3
fstec
около 3 лет назад

Уязвимость изолированной среды iframe веб-браузеров Firefox, Firefox ESR и почтового клиента Thunderbird, позволяющая нарушителю раскрыть защищаемую информацию

4.3 Medium

CVSS3