description: If two same-origin documents set document.domain differently to become cross-origin, it was possible for them to call arbitrary DOM methods/getters/setters on the now-cross-origin window. This vulnerability affects Firefox < 70, Thunderbird < 68.2, and Firefox ESR < 68.2.
problem types: document.domain-based origin isolation has same-origin-property violation
affected:
{
product: Firefox
vendor: Mozilla
versions:
status: affected, version: before 70
}
{
product: Thunderbird
vendor: Mozilla
versions:
status: affected, version: before 68.2
}
{
product: Firefox ESR
vendor: Mozilla
versions:
status: affected, version: before 68.2
}
