description: When visiting directory listings for `chrome://` URLs as source text, some parameters were reflected. This vulnerability affects Firefox ESR < 102.1, Firefox ESR < 91.12, Firefox < 103, Thunderbird < 102.1, and Thunderbird < 91.12.
problem types: Directory indexes for bundled resources reflected URL parameters
affected:
{
vendor: Mozilla
product: Firefox ESR
versions:
version: unspecified, lessThan: 102.1, status: affected, versionType: custom
version: unspecified, lessThan: 91.12, status: affected, versionType: custom
}
{
vendor: Mozilla
product: Firefox
versions:
version: unspecified, lessThan: 103, status: affected, versionType: custom
}
{
vendor: Mozilla
product: Thunderbird
versions:
version: unspecified, lessThan: 102.1, status: affected, versionType: custom
version: unspecified, lessThan: 91.12, status: affected, versionType: custom
}
