Policy Violation

2020-09-2106:25:11

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

0.002 Low

EPSS

Percentile

57.5%

JSON

thunderbird is vulnerable to policy violation. A same-origin policy violation allowing the theft of cross-origin URL entries when using a meta http-equiv=“refresh” on a page to cause a redirection to another site using performance.getEntries(). This is a same-origin policy violation and could allow for data theft.

CPENameOperatorVersion
thunderbird:bioniceq1:52.7.0+build1
firefox:xenialeq45.0.2+build1
thunderbird:trustyeq1:24.4.0+build1
firefox:bioniceq59.0.2+build1
thunderbird:xenialeq1:38.6.0+build1
thunderbird:stretcheq1:52.9.1-1~deb9u1
thunderbird:bioniceq1:52.7.0+build1
firefox:xenialeq45.0.2+build1
thunderbird:trustyeq1:24.4.0+build1
firefox:bioniceq59.0.2+build1

Name	Operator	Version
thunderbird:bionic	eq	1:52.7.0+build1
firefox:xenial	eq	45.0.2+build1
thunderbird:trusty	eq	1:24.4.0+build1
firefox:bionic	eq	59.0.2+build1
thunderbird:xenial	eq	1:38.6.0+build1
thunderbird:stretch	eq	1:52.9.1-1~deb9u1
thunderbird:bionic	eq	1:52.7.0+build1
firefox:xenial	eq	45.0.2+build1
thunderbird:trusty	eq	1:24.4.0+build1
firefox:bionic	eq	59.0.2+build1