Description (CNA)
When exiting fullscreen mode, an iframe could have confused the browser about the current state of fullscreen, resulting in potential user confusion or spoofing attacks. This vulnerability affects Thunderbird < 91.10, Firefox < 101, and Firefox ESR < 91.10.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Mozilla / Thunderbird | affected unspecified before 91.10 |
| Mozilla / Firefox | affected unspecified before 101 |
| Mozilla / Firefox ESR | affected unspecified before 91.10 |
CWE
No CWE identifiers supplied.
References
- https://www.mozilla.org/security/advisories/mfsa2022-20/
- https://www.mozilla.org/security/advisories/mfsa2022-22/
- https://www.mozilla.org/security/advisories/mfsa2022-21/
- https://bugzilla.mozilla.org/show_bug.cgi?id=1756388
ADP enrichment
No English description supplied.
No English description supplied.