CVE-2022-29911
Assigner: mozilla
Published: 2022-12-22T00:00:00
State: PUBLISHED
descriptions: value: An improper implementation of the new iframe sandbox keyword <code>allow-top-navigation-by-user-activation</code> could lead to script execution without <code>allow-scripts</code> being present. This vulnerability affects Thunderbird < 91.9, Firefox ESR < 91.9, and Firefox < 100.
affected: vendor: Mozilla
product: Thunderbird
versions: version: unspecified
lessThan: 91.9
status: affected
versionType: custom
vendor: Mozilla
product: Firefox ESR
versions: version: unspecified
lessThan: 91.9
status: affected
versionType: custom
vendor: Mozilla
product: Firefox
versions: version: unspecified
lessThan: 100
status: affected
versionType: custom
problemTypes: descriptions: type: text
description: iframe Sandbox bypass