CVE-2022-29911

6.1MEDIUM

An improper implementation of the new iframe sandbox keyword <code>allow-top-navigation-by-user-activation</code> could lead to script execution without <code>allow-scripts</code> being present. This

게시됨: 12/22/2022업데이트됨: 4/16/2025
NVD에서 보기MITRE에서 보기

설명

An improper implementation of the new iframe sandbox keyword <code>allow-top-navigation-by-user-activation</code> could lead to script execution without <code>allow-scripts</code> being present. This vulnerability affects Thunderbird < 91.9, Firefox ESR < 91.9, and Firefox < 100.

AI 분석AI 기반

영향받는 제품

mozillafirefox
mozillafirefox_esr
mozillathunderbird

참조