Due to a layout change, iframe contents could have been rendered outside of its border. This could have led to user confusion or spoofing attacks. This vulnerability affects Thunderbird < 91.8, Firefox < 99, and Firefox ESR < 91.8.
The web application does not restrict or incorrectly restricts frame objects or UI layers that belong to another application or domain, which can lead to user confusion about which interface the user is interacting with.
| Link | Tags |
|---|---|
| https://www.mozilla.org/security/advisories/mfsa2022-13/ | exploit vendor advisory |
| https://www.mozilla.org/security/advisories/mfsa2022-14/ | exploit vendor advisory |
| https://www.mozilla.org/security/advisories/mfsa2022-15/ | exploit vendor advisory |
| https://bugzilla.mozilla.org/show_bug.cgi?id=1735265 | issue tracking exploit vendor advisory |