Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Release: Mozilla Thunderbird 102.2.1, 91.13.1 Clear all filters
TI-2022-02797 CVE-2022-3034 · GHSA-wrfx-qxxc-92rj

Clickjacking in Mozilla Thunderbird

Priority LOW 21

When receiving an HTML email that specified to load an <code>iframe</code> element from a remote location, a request to the remote document was sent.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00569 Published 2022-12-22 Partial fix · 102.2.1, 91.13.1 CWE-1021
TI-2022-02796 CVE-2022-3033 · GHSA-q68w-fq74-6jp9

Cross-site scripting in Mozilla Thunderbird

Priority LOW 39

If a Thunderbird user replied to a crafted HTML email containing a <code>meta</code> tag, with the <code>meta</code> tag having the <code>http-equiv="refresh"</code> attribute, and the content attribute specifying an URL…

CVSS 3.1HIGH 8.1 Network No auth User interaction EPSS 0.00805 Published 2022-12-22 Partial fix · 102.2.1, 91.13.1 CWE-79
TI-2022-02795 CVE-2022-3032 · GHSA-2xmh-3jxc-r2w6

When receiving an HTML email that contained an <code>iframe</code> element, which used a…

Priority LOW 30

When receiving an HTML email that contained an <code>iframe</code> element, which used a <code>srcdoc</code> attribute to define the inner HTML document, remote objects specified in the nested document, for example image…

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00707 Published 2022-12-22 Partial fix · 102.2.1, 91.13.1 CWE-610