The vulnerability of the Thunderbird email client, which allows a remote attacker to forge cross-site requests

A vulnerability exists in the Thunderbird email client’s navigator.sendBeacon function, related to the handling of HTTP status codes 30x. Exploiting this vulnerability allows a malicious actor to bypass CORS access control mechanisms and forge cross-domain requests by using a specially crafted we...