CVE-2022-34474

Reference Links

• https://bugzilla.mozilla.org/show_bug.cgi?id=1677138
• https://www.mozilla.org/en-US/security/advisories/mfsa2022-24/
• https://www.mozilla.org/security/advisories/mfsa2022-24/

Parent vulnerabilities

(Appears in the following advisories)

• MFSA2022-24

Peer vulnerabilities

(Found alongside the following vulnerabilities)

• CVE-2022-34479
• CVE-2022-34470
• CVE-2022-34468
• CVE-2022-34482
• CVE-2022-34483
• CVE-2022-34476
• CVE-2022-34481
• CVE-2022-34474
• CVE-2022-34469
• CVE-2022-34471
• CVE-2022-34472
• CVE-2022-34478
• CVE-2022-2200
• CVE-2022-34480
• CVE-2022-34477
• CVE-2022-34475
• CVE-2022-34473
• CVE-2022-34484
• CVE-2022-34485

Frequently Asked Questions

• What is the vulnerability ID?

  The vulnerability ID is CVE-2022-34474.

• What is the severity of CVE-2022-34474?

  The severity of CVE-2022-34474 is medium with a CVSS score of 6.1.

• Which browsers are affected by CVE-2022-34474?

  Firefox versions up to and excluding 102 are affected by CVE-2022-34474.

• How does CVE-2022-34474 impact sandboxed iframes with allow-top-navigation-by-user-activation?

  Even when an iframe is sandboxed with allow-top-navigation-by-user-activation, if it receives a redirect header to an external protocol, the browser will process the redirect and prompt the user as appropriate.

• How can I find more information about CVE-2022-34474?

  You can find more information about CVE-2022-34474 in the following references: [1](https://bugzilla.mozilla.org/show_bug.cgi?id=1677138), [2](https://www.mozilla.org/en-US/security/advisories/mfsa2022-24/), [3](https://www.mozilla.org/security/advisories/mfsa2022-24/)