CVE-2022-34477

Name of the Vulnerable Software and Affected Versions Mozilla Firefox versions prior to 102

Description The issue is related to insufficient protection of internal data in the MediaError message property of Mozilla Firefox. This could allow a remote attacker to execute arbitrary code. The problem arises because the MediaError message property may leak information about cross-origin resources, potentially enabling XS-Leaks attacks for same-site cross-origin resources.

Recommendations For versions prior to 102, update to version 102 or later to resolve the issue. As a temporary workaround, consider restricting access to sensitive resources to minimize the risk of XS-Leaks attacks until the update is applied.