Red Hat Security AdvisoryRHSA-2022:4769
thunderbird security update
Released 2022-05-27 · Red Hat rating Critical · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream (v. 8) thunderbird-91.9.1-1.el8_6
Fixes 2 records
Priority HIGH 73
If an attacker was able to corrupt the methods of an Array object in JavaScript via prototype pollution, they could have achieved execution of attacker-controlled JavaScript code in a privileged context.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.28493 · Published 2022-12-22 · Partial fix · 91.9.1, 100.0.2 +1 CWE-1321
Priority MEDIUM 57
An attacker could have sent a message to the parent process where the contents were used to double-index into a JavaScript object, leading to prototype pollution and ultimately attacker-controlled JavaScript executing in…
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.17608 · Published 2022-12-22 · Partial fix · 91.9.1, 100.0.2 +1 CWE-1321
