Back to search
CVE-2022-26384
Published: Dec 22, 2022
Modified: Apr 16, 2025
PUBLISHED
Description
If an attacker could control the contents of an iframe sandboxed with <code>allow-popups</code> but not <code>allow-scripts</code>, they were able to craft a link that, when clicked, would lead to JavaScript execution in violation of the sandbox. This vulnerability affects Firefox < 98, Firefox ESR < 91.7, and Thunderbird < 91.7.
| Vendor | Product | Versions |
|---|---|---|
Mozilla | Firefox | affected unspecified - < 98 |
Mozilla | Firefox ESR | affected unspecified - < 91.7 |
Mozilla | Thunderbird | affected unspecified - < 91.7 |
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now