CVE-2022-36318

中危 5.3CVE-2022-36318 · Published 22/12/2022 · updated 17/06/2026

要点

CVE-2022-36318 是影响 firefox (mozilla), firefox esr (mozilla), thunderbird (mozilla) 的中危 (CVSS 5.3)漏洞。
未来 30 天内被利用的概率（EPSS）：0.53%，高于 44.8% 的漏洞。
修复：升级到 103.0, 102.1, 91.12 或更高版本。

Package	Affected versions	Patched versions
firefox mozilla	`< 103.0`	`103.0`
firefox esr mozilla	`< 102.1< 91.12`	`102.191.12`
thunderbird mozilla	`< 102.1< 91.12`	`102.191.12`

Description

When visiting directory listings for `chrome://` URLs as source text, some parameters were reflected. This vulnerability affects Firefox ESR < 102.1, Firefox ESR < 91.12, Firefox < 103, Thunderbird < 102.1, and Thunderbird < 91.12.

References

bugzilla.mozilla.org/show_bug.cgi · Issue Tracking
mozilla.org/security/advisories/mfsa2022-28 · Vendor Advisory
mozilla.org/security/advisories/mfsa2022-29 · Vendor Advisory
mozilla.org/security/advisories/mfsa2022-30 · Vendor Advisory
mozilla.org/security/advisories/mfsa2022-31 · Vendor Advisory
mozilla.org/security/advisories/mfsa2022-32 · Vendor Advisory

firefox 的其他漏洞

查看全部 →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

firefox

mozilla

< 103.0

103.0

firefox esr

mozilla

< 102.1< 91.12

102.191.12

thunderbird

mozilla

< 102.1< 91.12

102.191.12

firefox 的其他漏洞

查看全部 →