CVE-2022-22760
Assigner: mozilla
Published: 2022-12-22T00:00:00
State: PUBLISHED
descriptions: value: When importing resources using Web Workers, error messages would distinguish the difference between <code>application/javascript</code> responses and non-script responses. This could have been abused to learn information cross-origin. This vulnerability affects Firefox < 97, Thunderbird < 91.6, and Firefox ESR < 91.6.
affected: vendor: Mozilla
product: Firefox
versions: version: unspecified
lessThan: 97
status: affected
versionType: custom
vendor: Mozilla
product: Thunderbird
versions: version: unspecified
lessThan: 91.6
status: affected
versionType: custom
vendor: Mozilla
product: Firefox ESR
versions: version: unspecified
lessThan: 91.6
status: affected
versionType: custom
problemTypes: descriptions: type: text
description: Cross-Origin responses could be distinguished between script and non-script content-types