description: Using object or embed tags, it was possible to frame other websites, even if they disallowed framing using the X-Frame-Options header. This vulnerability affects Thunderbird < 78 and Firefox < 78.0.2.
problem types: X-Frame-Options bypass using object or embed tags
affected:
{
product: Thunderbird
vendor: Mozilla
versions:
lessThan: 78, status: affected, version: unspecified, versionType: custom
}
{
product: Firefox
vendor: Mozilla
versions:
lessThan: 78.0.2, status: affected, version: unspecified, versionType: custom
}
