Lucene search

K
debiancveDebian Security Bug TrackerDEBIANCVE:CVE-2022-45410
HistoryDec 22, 2022 - 8:15 p.m.

CVE-2022-45410

2022-12-2220:15:00
Debian Security Bug Tracker
security-tracker.debian.org
16

0.001 Low

EPSS

Percentile

40.5%

When a ServiceWorker intercepted a request with <code>FetchEvent</code>, the origin of the request was lost after the ServiceWorker took ownership of it. This had the effect of negating SameSite cookie protections. This was addressed in the spec and then in browsers. This vulnerability affects Firefox ESR < 102.5, Thunderbird < 102.5, and Firefox < 107.