Описание
Thunderbird cached CORS preflight responses across IP address changes. This allowed circumventing CORS with DNS rebinding. This vulnerability affects Firefox < 141, Firefox ESR < 140.1, Thunderbird < 141, and Thunderbird < 140.1.
Релиз | Статус | Примечание |
---|---|---|
devel | not-affected | code not present |
jammy | not-affected | code not present |
noble | not-affected | code not present |
plucky | not-affected | code not present |
upstream | needs-triage |
Показывать по
Релиз | Статус | Примечание |
---|---|---|
devel | DNE | |
esm-apps/noble | ignored | |
jammy | ignored | |
noble | ignored | |
plucky | DNE | |
upstream | needs-triage |
Показывать по
Релиз | Статус | Примечание |
---|---|---|
devel | ignored | |
jammy | DNE | |
noble | ignored | |
plucky | ignored | |
upstream | needs-triage |
Показывать по
Релиз | Статус | Примечание |
---|---|---|
devel | DNE | |
esm-apps/bionic | needs-triage | |
jammy | DNE | |
noble | DNE | |
plucky | DNE | |
upstream | needs-triage |
Показывать по
Релиз | Статус | Примечание |
---|---|---|
devel | DNE | |
esm-apps/focal | ignored | |
esm-infra/bionic | ignored | |
jammy | DNE | |
noble | DNE | |
plucky | DNE | |
upstream | needs-triage |
Показывать по
Релиз | Статус | Примечание |
---|---|---|
devel | DNE | |
esm-infra/focal | ignored | |
jammy | DNE | |
noble | DNE | |
plucky | DNE | |
upstream | needs-triage |
Показывать по
Релиз | Статус | Примечание |
---|---|---|
devel | DNE | |
esm-apps/jammy | ignored | |
jammy | ignored | |
noble | DNE | |
plucky | DNE | |
upstream | needs-triage |
Показывать по
Релиз | Статус | Примечание |
---|---|---|
devel | DNE | |
jammy | ignored | |
noble | DNE | |
plucky | DNE | |
upstream | needs-triage |
Показывать по
Релиз | Статус | Примечание |
---|---|---|
devel | not-affected | code not present |
jammy | not-affected | code not present |
noble | not-affected | code not present |
plucky | not-affected | code not present |
upstream | released | 140.1,141 |
Показывать по
Ссылки на источники
8.1 High
CVSS3
Связанные уязвимости
Thunderbird cached CORS preflight responses across IP address changes. This allowed circumventing CORS with DNS rebinding. This vulnerability affects Firefox < 141, Firefox ESR < 140.1, Thunderbird < 141, and Thunderbird < 140.1.
Thunderbird cached CORS preflight responses across IP address changes. ...
Thunderbird cached CORS preflight responses across IP address changes. This allowed circumventing CORS with DNS rebinding. This vulnerability affects Firefox < 141, Firefox ESR < 140.1, Thunderbird < 141, and Thunderbird < 140.1.
Security update for MozillaFirefox, MozillaFirefox-branding-SLE
8.1 High
CVSS3