CVE-2022-45420

Reference Links

• https://bugzilla.mozilla.org/show_bug.cgi?id=1792643
• https://www.mozilla.org/en-US/security/advisories/mfsa2022-49/
• https://www.mozilla.org/en-US/security/advisories/mfsa2022-47/
• https://www.mozilla.org/en-US/security/advisories/mfsa2022-48/
• https://www.mozilla.org/security/advisories/mfsa2022-47/
• https://www.mozilla.org/security/advisories/mfsa2022-48/
• https://www.mozilla.org/security/advisories/mfsa2022-49/

Parent vulnerabilities

(Appears in the following advisories)

• MFSA2022-49
• MFSA2022-48
• MFSA2022-47

Peer vulnerabilities

(Found alongside the following vulnerabilities)

• CVE-2022-45403
• CVE-2022-45404
• CVE-2022-45405
• CVE-2022-45406
• CVE-2022-45408
• CVE-2022-45409
• CVE-2022-45410
• CVE-2022-45411
• CVE-2022-45412
• CVE-2022-45416
• CVE-2022-45418
• CVE-2022-45420
• CVE-2022-45421
• CVE-2022-45407
• CVE-2022-45413
• CVE-2022-40674
• CVE-2022-45415
• CVE-2022-45417
• CVE-2022-46882
• CVE-2022-45419
• CVE-2022-46883

Frequently Asked Questions

• What is the vulnerability ID?

  The vulnerability ID is CVE-2022-45420.

• What is the impact of CVE-2022-45420?

  The vulnerability could allow an attacker to render iframe contents outside of the boundaries, potentially leading to user confusion or spoofing attacks.

• Which software versions are affected by CVE-2022-45420?

  Firefox ESR versions earlier than 102.5, Thunderbird versions earlier than 102.5, and Firefox versions earlier than 107 are affected.

• How serious is CVE-2022-45420?

  The severity of CVE-2022-45420 is rated as medium with a CVSS score of 6.5.

• How can I fix CVE-2022-45420?

  Update Firefox ESR to version 102.5 or later, Thunderbird to version 102.5 or later, and Firefox to version 107 or later to mitigate the vulnerability.