Sunday, February 13, 2022

MFSA2022-04 Firefox: Security Vulnerabilities fixed in Firefox 97 (CVE-2022-22761)

rapid7 vulnerabilities In: rapid7, vulnerabilities

Description
Web-accessible extension pages (pages with a moz-extension:// scheme) were not correctly enforcing the frame-ancestors directive when it was used in the Web Extension's Content Security Policy.
Solution(s)
mozilla-firefox-upgrade-97_0


Referenceshttps://attackerkb.com/topics/cve-2022-22761
CVE - 2022-22761
http://www.mozilla.org/security/announce/2022/mfsa2022-04.html