Lucene search
Alpine Linux Development TeamALPINE:CVE-2022-45408HistoryDec 22, 2022 - 8:15 p.m.
CVE-2022-45408
2022-12-2220:15:42
Alpine Linux Development Team
security.alpinelinux.org
10
window popup spoofing
user confusion
firefox esr
thunderbird
window full-screen
CVSS3
6.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
HIGH
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
AI Score
7.5
Confidence
High
EPSS
0.001
Percentile
43.1%
Through a series of popups that reuse windowName, an attacker can cause a window to go fullscreen without the user seeing the notification prompt, resulting in potential user confusion or spoofing attacks. This vulnerability affects Firefox ESR < 102.5, Thunderbird < 102.5, and Firefox < 107.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Alpine | edge-community | noarch | firefox-esr | < 102.5.0-r0 | UNKNOWN |
| Alpine | 3.18-community | noarch | firefox-esr | < 102.5.0-r0 | UNKNOWN |
| Alpine | 3.19-community | noarch | firefox-esr | < 102.5.0-r0 | UNKNOWN |
| Alpine | 3.20-community | noarch | firefox-esr | < 102.5.0-r0 | UNKNOWN |
Related
nvd
nvd
CVE-2022-45408
2022-12-22 20:15:42
redhatcve
redhatcve
CVE-2022-45408
2022-11-16 11:26:17
veracode
veracode
Spoofing Attacks
2022-11-19 18:47:45
prion
prion
Spoofing
2022-12-22 20:15:00
cvelist
cvelist
CVE-2022-45408
2022-12-22 00:00:00
ubuntucve
ubuntucve
CVE-2022-45408
2022-11-16 00:00:00
debiancve
debiancve
CVE-2022-45408
2022-12-22 20:15:42
cve
cve
CVE-2022-45408
2022-12-22 20:15:42
ibm
ibm
openvas
openvas
Mozilla Firefox ESR Security Advisories (MFSA2022-47, MFSA2022-49) - Windows
2022-11-16 00:00:00
Debian: Security Advisory (DLA-3196-1)
2022-11-18 00:00:00
Slackware: Security Advisory (SSA:2022-320-02)
2022-11-17 00:00:00
nessus
nessus
Debian DLA-3196-1 : thunderbird - LTS security update
2022-11-18 00:00:00
Slackware Linux 15.0 / current mozilla-firefox Multiple Vulnerabilities (SSA:2022-320-02)
2022-11-17 00:00:00
Oracle Linux 7 : firefox (ELSA-2022-8552)
2022-11-21 00:00:00
slackware
slackware
[slackware-security] mozilla-thunderbird
2022-11-17 02:00:24
[slackware-security] mozilla-firefox
2022-11-17 02:00:08
rocky
rocky
firefox security update
2023-01-30 05:25:59
firefox security update
2022-11-21 12:37:04
thunderbird security update
2022-11-21 11:16:30
osv
osv
thunderbird - security update
2022-11-17 00:00:00
Important: thunderbird security update
2022-11-21 11:16:30
Important: firefox security update
2022-11-21 12:37:04
almalinux
almalinux
Important: firefox security update
2022-11-22 00:00:00
Important: firefox security update
2022-11-21 00:00:00
Important: thunderbird security update
2022-11-21 00:00:00
gentoo
gentoo
Mozilla Thunderbird: Multiple Vulnerabilities
2022-11-22 00:00:00
Mozilla Firefox: Multiple Vulnerabilities
2022-11-22 00:00:00
centos
centos
thunderbird security update
2022-11-30 22:59:37
firefox security update
2022-11-30 22:58:26
debian
debian
[SECURITY] [DLA 3196-1] thunderbird security update
2022-11-17 11:54:17
[SECURITY] [DSA 5284-1] thunderbird security update
2022-11-17 19:02:16
[SECURITY] [DLA 3199-1] firefox-esr security update
2022-11-17 19:18:41
oraclelinux
oraclelinux
firefox security update
2022-11-24 00:00:00
thunderbird security update
2022-11-22 00:00:00
thunderbird security update
2022-11-24 00:00:00
mozilla
mozilla
Security Vulnerabilities fixed in Thunderbird 102.5 — Mozilla
2022-11-15 00:00:00
Security Vulnerabilities fixed in Firefox ESR 102.5 — Mozilla
2022-11-15 00:00:00
Security Vulnerabilities fixed in Firefox 107 — Mozilla
2022-11-15 00:00:00
redhat
redhat
(RHSA-2022:8545) Important: thunderbird security update
2022-11-21 11:14:50
(RHSA-2022:8544) Important: thunderbird security update
2022-11-21 11:11:27
(RHSA-2022:8580) Important: firefox security update
2022-11-22 13:22:40
altlinux
altlinux
Security fix for the ALT Linux 10 package thunderbird version 102.5.0-alt1
2022-11-24 00:00:00
Security fix for the ALT Linux 10 package firefox-esr version 102.5.0-alt1
2022-11-16 00:00:00
kaspersky
kaspersky
KLA20050 Multiple vulnerabilities in Mozilla Firefox ESR
2022-11-15 00:00:00
KLA20051 Multiple vulnerabilities in Mozilla Thunderbird
2022-11-15 00:00:00
KLA20049 Multiple vulnerabilities in Mozilla Firefox
2022-11-15 00:00:00
mageia
mageia
Updated thunderbird packages fix security vulnerability
2022-11-17 23:45:15
Updated firefox packages fix security vulnerability
2022-11-17 23:45:15
ubuntu
ubuntu
Firefox vulnerabilities
2022-11-16 00:00:00
Thunderbird vulnerabilities
2023-02-06 00:00:00
photon
photon
Critical Photon OS Security Update - PHSA-2023-5.0-0035
2023-06-22 00:00:00
CVSS3
6.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
HIGH
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
AI Score
7.5
Confidence
High
EPSS
0.001
Percentile
43.1%
Related for ALPINE:CVE-2022-45408