| Package | Affected versions | Patched versions |
|---|---|---|
| firefox | < 128.3.0< 131.0 | 128.3.0131.0 |
| thunderbird | = 129.0< 128.3 | 128.3 |
By checking the result of calls to `window.open` with specifically set protocol handlers, an attacker could determine if the application which implements that protocol handler is installed. This vulnerability affects Firefox < 131, Firefox ESR < 128.3, Thunderbird < 128.3, and Thunderbird < 131.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free