vulnerability
Oracle Linux: CVE-2021-4140: ELSA-2022-0127: thunderbird security update (IMPORTANT) (Multiple Advisories)
| Severity | CVSS | Published | Added | Modified |
|---|---|---|---|---|
| 10 | (AV:N/AC:L/Au:N/C:C/I:C/A:C) | Jan 11, 2022 | Jan 13, 2022 | Jan 7, 2025 |
Severity
10
CVSS
(AV:N/AC:L/Au:N/C:C/I:C/A:C)
Published
Jan 11, 2022
Added
Jan 13, 2022
Modified
Jan 7, 2025
Description
It was possible to construct specific XSLT markup that would be able to bypass an iframe sandbox. This vulnerability affects Firefox ESR < 91.5, Firefox < 96, and Thunderbird < 91.5.
The Mozilla Foundation Security Advisory describes this flaw as:
It was possible to construct specific XSLT markups that would enable someone to bypass an iframe sandbox.
The Mozilla Foundation Security Advisory describes this flaw as:
It was possible to construct specific XSLT markups that would enable someone to bypass an iframe sandbox.
Solutions
oracle-linux-upgrade-firefoxoracle-linux-upgrade-thunderbird
NEW
Explore Exposure Command
Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.