CVE:CVE-2022-22761
CNNVD:CNNVD-202202-577
Mozilla Firefox是美国Mozilla基金会的一款开源Web浏览器。
Mozilla Firefox 中存在安全特征问题漏洞，该漏洞源于产品框架根内容安全策略指令没有对框架扩展页面进行限制。远程攻击者可利用该漏洞执行未经授权的操作。
solution:Upgrade mozilla firefox to a higher version than 97.0,and avoid the version (,97.0); Upgrade mozilla firefox_esr to a higher version than 91.6,and avoid the version (,91.6); Upgrade mozilla thunderbird to a higher version than 91.6,and avoid the version (,91.6)