The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
A same-origin policy violation allowing the theft of cross-origin URL entries when using a meta http-equiv="refresh" on a page to cause a redirection to another site using performance.getEntries(). This is a same-origin policy violation and could allow for data theft. This vulnerability affects Firefox < 62, Firefox ESR < 60.2, and Thunderbird < 60.2.1.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade firefoxUpgrade thunderbirdUpgrade firefox-debuginfoUpgrade thunderbird-debuginfo | Jul 6, 2020 | Feb 28, 2019 |
| Debian | — | Upgrade thunderbirdUpgrade firefox-esr | Mar 12, 2019 | Feb 28, 2019 |
| Mfsa2018 20 | — | Upgrade to Mozilla Firefox version 62.0Upgrade to the latest version of Mozilla Firefox | Dec 12, 2018 | Sep 5, 2018 |
| Mfsa2018 21 | — | Upgrade to Mozilla Firefox ESR version 60.2Upgrade to the latest version of Mozilla Firefox | Dec 13, 2018 | Sep 5, 2018 |
| Mozilla Thunderbird | — | Upgrade to Mozilla Thunderbird version 60.2.1Upgrade to the latest version of Mozilla Thunderbird | Jan 29, 2019 | Oct 4, 2018 |
| Oracle Solaris | — | Upgrade web/data/firefox-bookmarks to version 68.6.0-11.4.21.0.1.69.0 on Solaris 11.4Upgrade mail/thunderbird to version 60.6.1-11.4.9.0.1.2.0 on Solaris 11.4Upgrade web/browser/firefox to version 68.6.0-11.4.21.0.1.69.0 on Solaris 11.4Upgrade mail/thunderbird/plugin/thunderbird-lightning to version 60.6.1-11.4.9.0.1.2.0 on Solaris 11.4 | May 30, 2019 | Feb 28, 2019 |
| Redhat_linux | — | Upgrade firefox-debuginfoUpgrade thunderbird-debuginfoUpgrade thunderbirdNo solution existsUpgrade firefox | Jul 6, 2020 | Feb 28, 2019 |
| Ubuntu | — | Upgrade firefoxUpgrade thunderbird | Nov 19, 2024 | Feb 28, 2019 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub