Lucene search
Veracode Vulnerability DatabaseVERACODE:36927HistorySep 04, 2022 - 11:42 a.m.
Arbitrary Code Execution
2022-09-0411:42:34
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
9
arbitrary code execution
firefox-esr
cross-origin iframe
xslt document
parent domain permissions
software
0.003 Low
EPSS
Percentile
65.6%
firefox-esr is vulnerable to arbitrary code execution. The vulnerability is possible because the cross-origin iframe referencing an XSLT document inheriting the parent domain’s permissions which allows an attacker to inject and execute arbitrary commands.
References
access.redhat.com/security/cve/CVE-2022-38473
bugzilla.mozilla.org/show_bug.cgi?id=1771685
security-tracker.debian.org/tracker/CVE-2022-38473
www.mozilla.org/security/advisories/mfsa2022-33/
www.mozilla.org/security/advisories/mfsa2022-34/
www.mozilla.org/security/advisories/mfsa2022-35/
www.mozilla.org/security/advisories/mfsa2022-36/
www.mozilla.org/security/advisories/mfsa2022-37/
Related
debiancve
debiancve
CVE-2022-38473
2022-12-22 20:15:36
prion
prion
Cross site scripting
2022-12-22 20:15:00
redhatcve
redhatcve
CVE-2022-38473
2022-08-23 14:11:07
nvd
nvd
CVE-2022-38473
2022-12-22 20:15:36
cve
cve
CVE-2022-38473
2022-12-22 20:15:36
cvelist
cvelist
CVE-2022-38473
2022-12-22 00:00:00
ubuntucve
ubuntucve
CVE-2022-38473
2022-08-24 00:00:00
alpinelinux
alpinelinux
CVE-2022-38473
2022-12-22 20:15:36
suse
suse
Security update for MozillaFirefox (important)
2022-09-05 00:00:00
Security update for MozillaThunderbird (important)
2022-09-15 00:00:00
Security update for MozillaFirefox (important)
2022-09-26 00:00:00
nessus
nessus
SUSE SLES15 Security Update : MozillaFirefox (SUSE-SU-2022:2984-1)
2022-09-02 00:00:00
Debian DSA-5217-1 : firefox-esr - security update
2022-08-25 00:00:00
Mozilla Thunderbird < 91.13
2022-08-23 00:00:00
openvas
openvas
SUSE: Security Advisory (SUSE-SU-2022:3007-1)
2022-09-05 00:00:00
Debian: Security Advisory (DLA-3080-1)
2022-08-25 00:00:00
Debian: Security Advisory (DSA-5221-1)
2022-08-31 00:00:00
debian
debian
[SECURITY] [DLA 3097-1] thunderbird security update
2022-09-04 20:53:01
[SECURITY] [DSA 5217-1] firefox-esr security update
2022-08-24 19:16:31
[SECURITY] [DLA 3080-1] firefox-esr security update
2022-08-24 20:10:43
mageia
mageia
Updated thunderbird packages fix security vulnerability
2022-08-29 08:07:41
Updated firefox/nss packages fix security vulnerability
2022-08-26 00:21:07
osv
osv
thunderbird - security update
2022-09-04 00:00:00
firefox-esr - security update
2022-08-24 00:00:00
firefox-esr - security update
2022-08-24 00:00:00
mozilla
mozilla
Security Vulnerabilities fixed in Thunderbird 91.13 — Mozilla
2022-08-23 00:00:00
Security Vulnerabilities fixed in Firefox ESR 91.13 — Mozilla
2022-08-23 00:00:00
Security Vulnerabilities fixed in Firefox ESR 102.2 — Mozilla
2022-08-23 00:00:00
kaspersky
kaspersky
KLA15729 Multiple vulnerabilities in Mozilla Thunderbird
2022-08-23 00:00:00
KLA15727 Multiple vulnerabilities in Mozilla Firefox ESR
2022-08-23 00:00:00
KLA15730 Multiple vulnerabilities in Mozilla Thunderbird
2022-08-23 00:00:00
slackware
slackware
[slackware-security] mozilla-thunderbird
2022-08-23 19:39:04
[slackware-security] mozilla-firefox
2022-08-23 19:38:49
SSA-2022-0906204408
2022-09-06 20:44:08
almalinux
almalinux
Important: thunderbird security update
2022-08-24 00:00:00
Important: firefox security update
2022-08-24 00:00:00
Important: thunderbird security update
2022-08-24 00:00:00
ubuntu
ubuntu
Firefox vulnerabilities
2022-08-24 00:00:00
Thunderbird vulnerabilities
2022-10-07 00:00:00
redhat
redhat
(RHSA-2022:6169) Important: thunderbird security update
2022-08-24 16:37:10
(RHSA-2022:6179) Important: firefox security update
2022-08-24 17:04:00
(RHSA-2022:6175) Important: firefox security update
2022-08-24 16:55:47
centos
centos
firefox security update
2022-09-01 22:00:44
thunderbird security update
2022-09-01 22:01:42
oraclelinux
oraclelinux
firefox security update
2022-08-25 00:00:00
thunderbird security update
2022-08-25 00:00:00
firefox security update
2022-08-25 00:00:00
rocky
rocky
thunderbird security update
2022-08-24 15:28:25
firefox security update
2022-08-24 16:55:47
altlinux
altlinux
Security fix for the ALT Linux 10 package thunderbird version 102.2.0-alt1
2022-08-24 00:00:00
Security fix for the ALT Linux 10 package firefox-esr version 102.2.0-alt1
2022-08-25 00:00:00
gentoo
gentoo
Mozilla Thunderbird: Multiple Vulnerabilities
2022-08-31 00:00:00
Mozilla Firefox: Multiple Vulnerabilities
2022-08-31 00:00:00
amazon
amazon
Important: thunderbird
2022-09-30 07:04:00
redos
redos
ROS-20221007-05
2022-10-07 00:00:00
ROS-20221007-04
2022-10-07 00:00:00
ibm
ibm
photon
photon
Critical Photon OS Security Update - PHSA-2023-5.0-0035
2023-06-22 00:00:00