| Package | Affected versions | Patched versions |
|---|---|---|
| firefox | < 115.8.0< 123.0 | 115.8.0123.0 |
| thunderbird | < 115.8.0 | 115.8.0 |
Through a series of API calls and redirects, an attacker-controlled alert dialog could have been displayed on another website (with the victim website's URL shown). This vulnerability affects Firefox < 123, Firefox ESR < 115.8, and Thunderbird < 115.8.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free