Ohne Score
Frame poisoning in the Layout component
Mozilla Firefox
Frame poisoning in the Layout component. This vulnerability was fixed in Firefox ESR 115.44.
Ohne Score
CVE-2023-29540
Beschreibung
Using a redirect embedded into <code>sourceMappingUrls</code> could allow for navigation to external protocol links in sandboxed iframes without <code>allow-top-navigation-to-custom-protocols</code>. This vulnerability affects Firefox for Android < 112, Firefox < 112, and Focus for Android < 112.
Daten: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Wiedergegeben wie in der Quelle, auf Englisch.
Betroffene Produkte und Versionen
| Hersteller | Produkt | Versionen | |
|---|---|---|---|
| Mozilla | Firefox | unspecified – < 112 | |
| Mozilla | Firefox for Android | unspecified – < 112 | |
| Mozilla | Focus for Android | unspecified – < 112 |