PT-2022-2263 · Mozilla+10 · Thunderbird+12

Prada960808 · Published 2022-04-05 · Updated 2024-12-12 · CVE-2022-28286

Positive Technologies (AI Summary)

CVSS v3.1

5.4

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Thunderbird versions prior to 91.8 Firefox versions prior to 99 Firefox ESR versions prior to 91.8

Description The issue is related to a layout change that could cause iframe contents to be rendered outside of its border, potentially leading to user confusion or spoofing attacks. This could allow a remote attacker to disclose protected information or spoof page content.

Recommendations For Thunderbird versions prior to 91.8, update to version 91.8 or later. For Firefox versions prior to 99, update to version 99 or later. For Firefox ESR versions prior to 91.8, update to version 91.8 or later.

Exploit

Fix

Clickjacking

UI Misrepresentation of Critical Information

Weakness Enumeration

CWE-1021

CWE-451

Related Identifiers

ALSA-2022:1287

ALSA-2022:1301

ALT-PU-2022-1642

ALT-PU-2022-1809

ALT-PU-2022-1847

ALT-PU-2022-1855

ALT-PU-2022-1941

ALT-PU-2022-1951

ALT-PU-2022-1983

ALT-PU-2022-2044

ALT-PU-2022-2053

ALT-PU-2022-2458

ALT-PU-2022-2929

ALT-PU-2022-2930

ALT-PU-2023-1138

ALT-PU-2023-1139

ALT-PU-2023-4336

ALT-PU-2023-4339

BDU:2022-02372

CESA-2022_1287

CESA-2022_1301

CVE-2022-28286

DLA-2971-1

DLA-2978-1

DSA-5113-1

DSA-5118-1

MGASA-2022-0156

MGASA-2022-0157

OESA-2023-1673

OESA-2023-1674

OPENSUSE-SU-2022:1127-1

OPENSUSE-SU-2022_1127-1

OPENSUSE-SU-2022_1176-1

OPENSUSE-SU-2024:11975-1

OPENSUSE-SU-2024:14572-1

RHSA-2022:1283

RHSA-2022:1284

RHSA-2022:1285

RHSA-2022:1286

RHSA-2022:1287

RHSA-2022:1301

RHSA-2022:1302

RHSA-2022:1303

RHSA-2022:1305

RHSA-2022:1326

RHSA-2022_1284

RHSA-2022_1287

RHSA-2022_1301

RHSA-2022_1302

RLSA-2022:1287

RLSA-2022:1301

SUSE-RU-2022:1114-1

SUSE-RU-2022:1125-1

SUSE-RU-2022:14935-1

SUSE-SU-2022:1127-1

SUSE-SU-2022:1176-1

USN-5370-1

USN-5393-1

Affected Products

Alt Linux

Almalinux

Astra Linux

Centos

Firefox

Firefox Esr

Linuxmint

Red Hat

Red Os

Rocky Linux

Suse

Thunderbird

Ubuntu

References · 2262

• 🔥 https://github.com/mistymntncop/CVE-2022-1802 · Exploit
• 🔥 https://github.com/0vercl0k/CVE-2022-28281 · Exploit
• 🔥 https://github.com/mistymntncop/CVE-2022-26485 · Exploit
• 🔥 https://mozilla.org/security/advisories/mfsa2022-15 · Exploit
• 🔥 https://bugzilla.mozilla.org/show_bug.cgi?id=1735265 · Exploit
• 🔥❌ https://github.com/MagicPwnrin/CVE-2022-28282 · Exploit, Deleted
• 🔥 https://mozilla.org/security/advisories/mfsa2022-13 · Exploit
• 🔥❌ https://github.com/Pwnrin/CVE-2022-28282 · Exploit, Deleted
• 🔥 https://mozilla.org/security/advisories/mfsa2022-14 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2021-23968 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2022-45408 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2023-4046 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2022-22748 · Security Note
• https://osv.dev/vulnerability/RLSA-2022:1301 · Vendor Advisory
• https://mozilla.org/en-US/security/advisories/mfsa2022-15/#CVE-2022-28286 · Vendor Advisory