PT-2022-22174
CVE-2022-34474
·
Published
2022-06-28
·
Updated
2026-10-31
Description by
CVSS 3.1
6.1
MediumMetricsAV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Name of the Vulnerable Software and Affected Versions
Firefox versions prior to 102
Description
A security issue exists where a sandboxed iframe with the
allow-top-navigation-by-user-activation attribute can still process redirect headers to external protocols, potentially prompting the user.Recommendations
For Firefox versions prior to 102, update to version 102 or later to resolve the issue.
Exploitability
Exploit
Fix
Impacts
Vendors
Affected products
Found an issue in the description? Have something to add? Feel free to write us 👾