Frederik Braun

**Name of the Vulnerable Software and Affected Versions** Firefox versions prior to 152 Thunderbird versions prior to 152 **Description** A mitigation bypass exists within the DOM security component.

Name of the Vulnerable Software and Affected Versions: Firefox ESR versions prior to 78.10 Thunderbird versions prior to 78.10 Firefox versions prior to 88 Description: The issue exists due to insufficient input validation, allowing a remote attacker to bypass security restrictions. This can be exploited when using the Alt-Svc header with ports written as an integer overflow above the bounds of a 16-bit integer, potentially bypassing port blocking restrictions. Recommendations: For Firefox ESR versions prior to 78.10, update to version 78.10 or later. For Thunderbird versions prior to 78.10, update to version 78.10 or later. For Firefox versions prior to 88, update to version 88 or later.

**Name of the Vulnerable Software and Affected Versions** Thunderbird versions prior to 78 Firefox versions prior to 78.0.2 **Description** The issue allows framing of other websites using object or embed tags, despite those websites disallowing framing with the X-Frame-Options header. **Recommendations** For Thunderbird versions prior to 78, update to version 78 or later. For Firefox versions prior to 78.0.2, update to version 78.0.2 or later.

**Name of the Vulnerable Software and Affected Versions** Firefox versions prior to 76 **Description** Memory safety bugs were reported in Firefox, which showed evidence of memory corruption. It is presumed that with enough effort, some of these bugs could have been exploited to run arbitrary code. **Recommendations** For versions prior to 76, update to version 76 or later to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** Nextcloud Server version 16.0.1 **Description** A reflected Cross-Site Scripting issue was found in the svg generation of the affected software. **Recommendations** For Nextcloud Server version 16.0.1, update to a version that includes a fix for this issue.

**Name of the Vulnerable Software and Affected Versions** Djblets versions prior to 0.7.21 Beanbag Review Board versions prior to 1.7.15 **Description** The issue exists when parsing JSON requests, allowing an attacker to execute arbitrary Python code due to an eval() vulnerability. **Recommendations** For Djblets versions prior to 0.7.21, update to version 0.7.21 or later to resolve the issue. For Beanbag Review Board versions prior to 1.7.15, update to version 1.7.15 or later to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** Firefox versions prior to 68 **Description** The issue is related to unnecessary application permissions that provide additional remote troubleshooting access to the retired site input.mozilla.org, now redirecting to another site. This could serve as a potential vector for malicious attacks. The vulnerability is associated with errors in Firefox's permission settings, which could allow a remote attacker to access and compromise confidential data. **Recommendations** For versions prior to 68, update to version 68 or later to resolve the issue. As a temporary workaround, consider restricting access to remote troubleshooting features until the update is applied.

**Name of the Vulnerable Software and Affected Versions** Mozilla Firefox versions prior to 67.0.4 Mozilla Firefox ESR versions prior to 60.7.2 Thunderbird versions prior to 60.7.2 **Description** The issue is caused by insufficient vetting of parameters passed with the `Prompt:Open` IPC message between child and parent processes. This can result in the non-sandboxed parent process opening web content chosen by a compromised child process, potentially allowing attackers to execute arbitrary code on the user's computer when combined with additional vulnerabilities. **Recommendations** For Mozilla Firefox versions prior to 67.0.4, update to version 67.0.4 or later. For Mozilla Firefox ESR versions prior to 60.7.2, update to version 60.7.2 or later. For Thunderbird versions prior to 60.7.2, update to version 60.7.2 or later. As a temporary workaround, consider restricting access to the `Prompt:Open` IPC message to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** Mozilla Firefox versions prior to 55 **Description** The issue is related to the implementation of the WebRTC mechanism in Mozilla Firefox, which fails to protect the structure of web pages. This could potentially allow a remote attacker to conduct cross-site scripting (XSS) attacks. The vulnerability is difficult to exploit because the data is supplied by WebRTC usage and is not under third-party control. **Recommendations** For versions prior to 55, update to version 55 or later to resolve the issue. As a temporary workaround, consider restricting access to the "about:webrtc" page until a patch is available. Avoid using the `innerHTML` property in the affected page to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** Firefox ESR versions prior to 52.3 Firefox versions prior to 55 **Description** The Developer Tools feature has a XUL injection issue due to improper sanitization of web page source code. This could allow arbitrary code execution when opening a malicious page with the style editor tool. **Recommendations** For Firefox ESR versions prior to 52.3, update to version 52.3 or later. For Firefox versions prior to 55, update to version 55 or later.

**Name of the Vulnerable Software and Affected Versions** Mozilla Firefox OS versions prior to 2.5 **Description** The lockscreen feature does not properly restrict failed authentication attempts, making it easier for physically proximate attackers to obtain access by entering many passcode guesses. **Recommendations** For versions prior to 2.5, update to version 2.5 or later to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** Apache CouchDB versions prior to 1.0.4 Apache CouchDB versions 1.1.x prior to 1.1.2 Apache CouchDB versions 1.2.x prior to 1.2.1 **Description** A cross-site scripting (XSS) issue exists in the Futon UI of Apache CouchDB, allowing remote attackers to inject arbitrary web script or HTML via unspecified parameters to the browser-based test suite. **Recommendations** For versions prior to 1.0.4, update to version 1.0.4 or later. For versions 1.1.x prior to 1.1.2, update to version 1.1.2 or later. For versions 1.2.x prior to 1.2.1, update to version 1.2.1 or later.

**Name of the Vulnerable Software and Affected Versions** Review Board versions 1.6.x through 1.6.20 Review Board versions 1.7.x through 1.7.16 **Description** The issue allows remote attackers to inject arbitrary web script or HTML. This can be achieved via the `Branch` field or the `caption` of an uploaded file. **Recommendations** For Review Board versions 1.6.x through 1.6.20, update to version 1.6.21 or later. For Review Board versions 1.7.x through 1.7.16, update to version 1.7.17 or later.

**Name of the Vulnerable Software and Affected Versions** Mozilla Firefox versions prior to 19.0 Firefox ESR versions 17.x prior to 17.0.3 Thunderbird versions prior to 17.0.3 Thunderbird ESR versions 17.x prior to 17.0.3 SeaMonkey versions prior to 2.16 **Description** The issue allows JavaScript workers to read the browser-profile directory name, which has unspecified impact and can be exploited through remote attack vectors. **Recommendations** For Mozilla Firefox versions prior to 19.0, update to version 19.0 or later. For Firefox ESR versions 17.x prior to 17.0.3, update to version 17.0.3 or later. For Thunderbird versions prior to 17.0.3, update to version 17.0.3 or later. For Thunderbird ESR versions 17.x prior to 17.0.3, update to version 17.0.3 or later. For SeaMonkey versions prior to 2.16, update to version 2.16 or later.