Mend.io Vulnerability Database

What is a CVE vulnerability ID? icon What is a WS vulnerability ID? icon What is an MSC vulnerability ID? icon
New vulnerability? Tell us about it!
icon

We found results for “”

CVE-2022-38472

Date: December 22, 2022

An attacker could have abused XSLT error handling to associate attacker-controlled content with another origin which was displayed in the address bar. This could have been used to fool the user into submitting data intended for the spoofed origin. This vulnerability affects Thunderbird < 102.2, Thunderbird < 91.13, Firefox ESR < 91.13, Firefox ESR < 102.2, and Firefox < 104.

Severity Score

Related Resources (11)

https://bugzilla.mozilla.org/show_bug.cgi?id=1769155
https://security-tracker.debian.org/tracker/CVE-2022-38472
https://people.canonical.com/~ubuntu-security/cve/CVE-2022-38472
https://nvd.nist.gov/vuln/detail/CVE-2022-38472
https://access.redhat.com/security/cve/CVE-2022-38472
https://www.mozilla.org/security/advisories/mfsa2022-37/
https://www.mozilla.org/security/advisories/mfsa2022-36/
https://www.mozilla.org/security/advisories/mfsa2022-35/
https://www.mozilla.org/security/advisories/mfsa2022-34/
https://www.mozilla.org/security/advisories/mfsa2022-33/
https://www.mend.io/vulnerability-database/CVE-2022-38472

Severity Score

Weakness Type (CWE)

Origin Validation Error

CWE-346

CVSS v3.1

Base Score:
Attack Vector (AV): NETWORK
Attack Complexity (AC): LOW
Privileges Required (PR): NONE
User Interaction (UI): REQUIRED
Scope (S): UNCHANGED
Confidentiality (C): NONE
Integrity (I): HIGH
Availability (A): NONE

Do you need more information?

Contact Us