A cross-origin iframe referencing an... CVE-2022-38473

- AV AC AU C I A
发布： 2022-12-22
修订： 2024-11-21

A cross-origin iframe referencing an XSLT document would inherit the parent domain's permissions (such as microphone or camera access). This vulnerability affects Thunderbird < 102.2, Thunderbird < 91.13, Firefox ESR < 91.13, Firefox ESR < 102.2, and Firefox < 104.

0%

漏洞利用/PoC

暂无可用Exp或PoC

受影响的平台与产品

当前有6条受影响产品信息