CVE-2022-26384

Si un atacante pudiera controlar el contenido de un iframe en un espacio aislado con <code>allow-popups</code> pero no con <code>allow-scripts</code>, podría crear un enlace que, al hacer clic, conduciría a Ejecución de JavaScript en violación de la sandbox. Esta vulnerabilidad afecta a Firefox &lt; 98, Firefox ESR &lt; 91,7 y Thunderbird &lt; 91.7.

The Mozilla Foundation Security Advisory describes this flaw as: If an attacker could control the contents of an iframe sandboxed with allow-popups but not allow-scripts, they were able to craft a link that, when clicked, would lead to JavaScript execution in violation of the sandbox.

An update that fixes 5 vulnerabilities is now available. This update for MozillaThunderbird fixes the following issues. Updated to version 91.7. Fixed an invalid memory access due to text reflow when SVG objects were present. Fixed an issue where, when resizing a popup after requesting fullscreen access, the popup would not display the fullscreen notification. Fixed an iframe XSS sandbox bypass when allow-popups was used on the iframe. Fixed an issue where downloadable temporary files were accessible to other local users. Fixed a potential add-on signature verification bypass due to a race condition.