CVE-2022-22760

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 97 Thunderbird versions prior to 91.6 Firefox ESR versions prior to 91.6

Description The issue is related to how error messages are handled when importing resources using Web Workers, potentially allowing an attacker to distinguish between application/javascript responses and non-script responses, and thus learn information cross-origin. This could be abused to gain unauthorized access to protected information.

Recommendations For Firefox versions prior to 97, update to version 97 or later. For Thunderbird versions prior to 91.6, update to version 91.6 or later. For Firefox ESR versions prior to 91.6, update to version 91.6 or later.