The Mozilla Foundation Security Advisory describes this flaw as: Documents in deeply-nested cross-origin browsing contexts could have obtained permissions granted to the top-level origin, bypassing the existing prompt and wrongfully inheriting the top-level permissions.

References

bugzilla.redhat.com/show_bug.cgi?id=2081469

nvd.nist.gov/vuln/detail/CVE-2022-29909

www.cve.org/CVERecord?id=CVE-2022-29909

www.mozilla.org/en-US/security/advisories/mfsa2022-17/#CVE-2022-29909

www.mozilla.org/en-US/security/advisories/mfsa2022-18/#CVE-2022-29909

veracode 1

ubuntucve 1

cvelist 1

alpinelinux 1

prion 1

debiancve 1

nvd 1

cve 1

nessus 48

openvas 23

altlinux 2

centos 2

oraclelinux 6

osv 24

rocky 2

mozilla 3

redhat 12

debian 4

almalinux 2

mageia 2

kaspersky 3

redos 2

suse 2

archlinux 2

ubuntu 2

ibm 2

gentoo 2

veracode

Authentication Bypass

2022-05-07 02:03:54

ubuntucve

CVE-2022-29909

2022-05-04 00:00:00

cvelist

CVE-2022-29909

2022-12-22 00:00:00

alpinelinux

CVE-2022-29909

2022-12-22 20:15:25

prion

Cross site scripting

2022-12-22 20:15:00

debiancve

CVE-2022-29909

2022-12-22 20:15:25

nvd

CVE-2022-29909

2022-12-22 20:15:25

cve

CVE-2022-29909

2022-12-22 20:15:25

nessus

Rocky Linux 8 : firefox (RLSA-2022:1705)

2023-11-07 00:00:00

Mozilla Firefox ESR < 91.9

2022-05-03 00:00:00

AlmaLinux 9 : firefox (ALSA-2022:4590)

2022-11-16 00:00:00

openvas

Mozilla Firefox ESR Security Advisory (MFSA2022-17) - Windows

2022-07-07 00:00:00

SUSE: Security Advisory (SUSE-SU-2022:1731-1)

2022-05-19 00:00:00

CentOS: Security Advisory for firefox (CESA-2022:1703)

2022-05-07 00:00:00

altlinux

Security fix for the ALT Linux 10 package firefox-esr version 91.9.0-alt1

2022-05-04 00:00:00

Security fix for the ALT Linux 10 package thunderbird version 91.9.0-alt1

2022-05-04 00:00:00

centos

firefox security update

2022-05-06 16:01:51

thunderbird security update

2022-05-06 16:02:55

oraclelinux

firefox security update

2022-06-30 00:00:00

firefox security update

2022-05-04 00:00:00

firefox security update

2022-05-04 00:00:00

osv

Important: firefox security update

2022-05-04 11:04:22

Red Hat Security Advisory: firefox security update

2024-09-16 08:03:30

Red Hat Security Advisory: firefox security update

2024-09-16 08:03:22

rocky

firefox security update

2022-05-04 11:04:22

thunderbird security update

2022-05-05 13:32:08

mozilla

Security Vulnerabilities fixed in Firefox ESR 91.9 — Mozilla

2022-05-03 00:00:00

Security Vulnerabilities fixed in Thunderbird 91.9 — Mozilla

2022-05-03 00:00:00

Security Vulnerabilities fixed in Firefox 100 — Mozilla

2022-05-03 00:00:00

redhat

(RHSA-2022:1705) Important: firefox security update

2022-05-04 11:04:22

(RHSA-2022:1704) Important: firefox security update

2022-05-04 11:04:22

(RHSA-2022:1701) Important: firefox security update

2022-05-04 11:04:10

debian

[SECURITY] [DSA 5129-1] firefox-esr security update

2022-05-04 18:03:17

[SECURITY] [DLA 2994-1] firefox-esr security update

2022-05-05 12:25:21

[SECURITY] [DLA 3020-1] thunderbird security update

2022-05-23 07:46:38

almalinux

Important: firefox security update

2022-05-04 11:04:22

Important: thunderbird security update

2022-05-05 13:32:08

mageia

Updated firefox packages fix security vulnerability

2022-05-06 23:16:39

Updated thunderbird packages fix security vulnerability

2022-05-06 23:16:39

kaspersky

KLA12521 Multiple vulnerabilities in Mozilla Firefox ESR

2022-05-03 00:00:00

KLA12522 Multiple vulnerabilities in Mozilla Thunderbird

2022-05-03 00:00:00

KLA12520 Multiple vulnerabilities in Mozilla Firefox

2022-05-03 00:00:00

redos

ROS-20220518-01

2022-05-18 00:00:00

ROS-20220518-02

2022-05-18 00:00:00

suse

Security update for MozillaFirefox (important)

2022-05-19 00:00:00

Security update for MozillaThunderbird (important)

2022-05-17 00:00:00

archlinux

[ASA-202205-3] thunderbird: multiple issues

2022-05-16 00:00:00

[ASA-202205-4] firefox: multiple issues

2022-05-16 00:00:00

ubuntu

Firefox vulnerabilities

2022-05-11 00:00:00

Thunderbird vulnerabilities

2022-05-25 00:00:00

ibm

Security Bulletin: Multiple vulnerabilities of Mozilla Firefox (less than Firefox 102.2ESR) have affected Synthetic Playback Agent 8.1.4.0-8.1.4 IF16 - 2022.4.0

2022-11-15 05:24:36

Security Bulletin: Multiple vulnerabilities in Mozilla Firefox affect IBM Cloud Pak for Multicloud Management Monitoring.

2023-01-31 14:47:39

gentoo

Mozilla Firefox: Multiple Vulnerabilities

2022-08-10 00:00:00

Mozilla Thunderbird: Multiple Vulnerabilities

2022-08-10 00:00:00

Solutions

Vulnerabilities intelligence
Perimeter control tool
Linux scanner
Windows scanner
Developers SDK
Security Intelligence feeds

Database

Vulnerabilities
Exploits
Security News
BugBounty
Wild Exploited
Top Vulnerabilities
CVE Feed

Resources

Statics & Sources
Plugins
API docs
FAQ
Blog
Glossary

Company

About
Contacts
Pricing
EULA
Privacy Policy
Submission Policy
OpenSource

@2024 Vulners Inc

CVSS3

8.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

EPSS

0.002

Percentile

59.3%

JSON

Related for RH:CVE-2022-29909