| Package | Affected versions | Patched versions |
|---|---|---|
| firefox | ≥ 102.0, < 102.2< 104.0 | 102.2104.0 |
| firefox esr | < 91.13 | 91.13 |
| thunderbird | ≥ 102.0, < 102.2< 91.13 | 102.291.13 |
A cross-origin iframe referencing an XSLT document would inherit the parent domain's permissions (such as microphone or camera access). This vulnerability affects Thunderbird < 102.2, Thunderbird < 91.13, Firefox ESR < 91.13, Firefox ESR < 102.2, and Firefox < 104.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free