Lucene search
Debian Security Bug TrackerDEBIANCVE:CVE-2022-34474HistoryDec 22, 2022 - 8:15 p.m.
CVE-2022-34474
2022-12-2220:15:32
Debian Security Bug Tracker
security-tracker.debian.org
19
vulnerability
firefox
iframe
redirect
cve-2022-34474
unix
CVSS3
6.1
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
EPSS
0.001
Percentile
33.8%
Even when an iframe was sandboxed with <code>allow-top-navigation-by-user-activation</code>, if it received a redirect header to an external protocol the browser would process the redirect and prompt the user as appropriate. This vulnerability affects Firefox < 102.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Debian | 999 | all | firefox | < 102.0-1 | firefox_102.0-1_all.deb |
Related
prion
prion
Design/Logic Flaw
2022-12-22 20:15:00
veracode
veracode
Information Disclosure
2022-06-30 21:54:34
cvelist
cvelist
CVE-2022-34474
2022-12-22 00:00:00
cve
cve
CVE-2022-34474
2022-12-22 20:15:32
ubuntucve
ubuntucve
CVE-2022-34474
2022-07-05 00:00:00
alpinelinux
alpinelinux
CVE-2022-34474
2022-12-22 20:15:32
nvd
nvd
CVE-2022-34474
2022-12-22 20:15:32
openvas
openvas
Mozilla Firefox Security Advisory (MFSA2022-24) - Linux
2022-06-29 00:00:00
Mozilla Firefox Security Advisory (MFSA2022-24) - Mac OS X
2022-07-07 00:00:00
Mozilla Firefox Security Advisory (MFSA2022-24) - Windows
2022-07-07 00:00:00
osv
osv
firefox vulnerabilities
2022-07-05 17:03:55
MozillaFirefox-102.0.1-1.1 on GA media
2024-06-15 00:00:00
ubuntu
ubuntu
Firefox vulnerabilities
2022-07-05 00:00:00
nessus
nessus
Ubuntu 18.04 LTS / 20.04 LTS : Firefox vulnerabilities (USN-5504-1)
2022-07-05 00:00:00
Mozilla Firefox < 102.0
2022-06-29 00:00:00
Mozilla Firefox < 102.0
2022-06-29 00:00:00
mozilla
mozilla
Security Vulnerabilities fixed in Firefox 102 — Mozilla
2022-06-28 00:00:00
kaspersky
kaspersky
KLA12575 Multiple vulnerabilities in Mozilla Firefox
2022-06-28 00:00:00
suse
suse
Security update for MozillaFirefox (important)
2022-09-26 00:00:00
gentoo
gentoo
Mozilla Firefox: Multiple Vulnerabilities
2022-08-10 00:00:00
photon
photon
Critical Photon OS Security Update - PHSA-2023-5.0-0035
2023-06-22 00:00:00
CVSS3
6.1
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
EPSS
0.001
Percentile
33.8%
Related for DEBIANCVE:CVE-2022-34474