CVE-2022-42927
Assigner: mozilla
Published: 2022-12-22T00:00:00
State: PUBLISHED
affected: product: Firefox
vendor: Mozilla
versions: lessThan: 106
status: affected
version: unspecified
versionType: custom
product: Firefox ESR
vendor: Mozilla
versions: lessThan: 102.4
status: affected
version: unspecified
versionType: custom
product: Thunderbird
vendor: Mozilla
versions: lessThan: 102.4
status: affected
version: unspecified
versionType: custom
descriptions: value: A same-origin policy violation could have allowed the theft of cross-origin URL entries, leaking the result of a redirect, via `performance.getEntries()`. This vulnerability affects Firefox < 106, Firefox ESR < 102.4, and Thunderbird < 102.4.
supportingMedia: type: text/html
base64: no
value: A same-origin policy violation could have allowed the theft of cross-origin URL entries, leaking the result of a redirect, via <code>performance.getEntries()</code>. This vulnerability affects Firefox < 106, Firefox ESR < 102.4, and Thunderbird < 102.4.
problemTypes: descriptions: description: Same-origin policy violation could have leaked cross-origin URLs
type: text
credits: value: James Lee