CVE:CVE-2022-29911
CNNVD:CNNVD-202205-1934
Mozilla Firefox是美国Mozilla基金会的一款开源Web浏览器。
Mozilla Firefox存在安全特征问题漏洞，该漏洞源于对iframe沙箱的顶级导航保护不当，对top-navigation-by-user-activation之类的关键字放宽了策略。
solution:Upgrade mozilla firefox to a higher version than 100.0,and avoid the version (,100.0); Upgrade mozilla firefox_esr to a higher version than 91.9,and avoid the version (,91.9); Upgrade mozilla thunderbird to a higher version than 91.9,and avoid the version (,91.9)