2 matches found
SUSE-SU-2022:2320-1 Security update for MozillaThunderbird
This update for MozillaThunderbird fixes the following issues: - CVE-2022-2200: Undesired attributes could be set as part of prototype pollution bmo1771381 - CVE-2022-2226: An email with a mismatching OpenPGP signature date was accepted as valid bmo1775441 - CVE-2022-31744: CSP bypass enabling...
9.8CVSS8.1AI score0.23941EPSS
SaveExploits2References12
Authentication Bypass
firefox and thunderbird are vulnerable to authentication bypass. ms-msdt, search, and search-ms protocols deliver content to Microsoft applications, bypassing the browser, when a user accepts a prompt...
6.5CVSS7.8AI score0.00783EPSS
SaveExploits1References6Affected Software3
20