cveboard RSS feed

CVE-2022-38472

CVE.org · Published

Historical CVEsJSONAI instructions

Record status
Published
Identifier year (not publication year)
2022
Source publication
Source updated
Imported by cveboard
Source snapshot
cve_2026-10-24_midnight_baseline ·

Plain text

CNA source text (English)

An attacker could have abused XSLT error handling to associate attacker-controlled content with another origin which was displayed in the address bar. This could have been used to fool the user into submitting data intended for the spoofed origin. This vulnerability affects Thunderbird < 102.2, Thunderbird < 91.13, Firefox ESR < 91.13, Firefox ESR < 102.2, and Firefox < 104.

Scoped product and version facts

Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.

Exploitation unknown; this catalogue does not assess exploitation.

Thunderbird

Vendor
Mozilla
Product
Thunderbird
Platforms
Unknown
Default status
Unknown
Thunderbird · Scoped product and version facts
Version (version)Status (status)Version scheme (versionType)Exclusive end (lessThan)Inclusive end (lessThanOrEqual)Status changes (at → status)
unspecifiedaffectedcustom102.2UnavailableNone listed
unspecifiedaffectedcustom91.13UnavailableNone listed

Firefox ESR

Vendor
Mozilla
Product
Firefox ESR
Platforms
Unknown
Default status
Unknown
Firefox ESR · Scoped product and version facts
Version (version)Status (status)Version scheme (versionType)Exclusive end (lessThan)Inclusive end (lessThanOrEqual)Status changes (at → status)
unspecifiedaffectedcustom91.13UnavailableNone listed
unspecifiedaffectedcustom102.2UnavailableNone listed

Firefox

Vendor
Mozilla
Product
Firefox
Platforms
Unknown
Default status
Unknown
Firefox · Scoped product and version facts
Version (version)Status (status)Version scheme (versionType)Exclusive end (lessThan)Inclusive end (lessThanOrEqual)Status changes (at → status)
unspecifiedaffectedcustom104UnavailableNone listed