CVE-2022-29911: Medium severity thunderbird vulnerability
An improper implementation of the new iframe sandbox keyword <code>allow-top-navigation-by-user-activation</code> could lead to script execution without <code>allow-scripts</code> being present. This vulnerability affects Thunderbird < 91.9, Firefox ESR < 91.9, and Firefox < 100.
Other sources
An improper implementation of the new iframe sandbox keyword allow-top-navigation-by-user-activation could lead to script execution without allow-scripts being present.
Affected Software
Event History
Parent advisories
This vulnerability appears in the following advisories.
Peer vulnerabilities
Found alongside the following vulnerabilities.
Frequently Asked Questions
What is the severity of CVE-2022-29911?
CVE-2022-29911 has been classified as high severity due to its potential to allow script execution without necessary permissions.
How do I fix CVE-2022-29911?
To mitigate CVE-2022-29911, users should upgrade Mozilla Thunderbird to version 91.9 or later, and Firefox to version 100 or later.
Which versions are affected by CVE-2022-29911?
CVE-2022-29911 affects Thunderbird versions prior to 91.9, Firefox ESR versions prior to 91.9, and Firefox versions prior to 100.
What is the impact of CVE-2022-29911?
The impact of CVE-2022-29911 includes the potential for unauthorized script execution in affected versions.
Does CVE-2022-29911 affect both Firefox and Thunderbird?
Yes, CVE-2022-29911 affects both Mozilla Firefox and Mozilla Thunderbird in specific versions.