Saturday, February 12, 2022

MFSA2022-04 Firefox: Security Vulnerabilities fixed in Firefox 97 (CVE-2022-22760)

rapid7 vulnerabilities In: rapid7, vulnerabilities

Description
When importing resources using Web Workers, error messages would distinguish the difference between application/javascript responses and non-script responses.  This could have been abused to learn information cross-origin.
Solution(s)
mozilla-firefox-upgrade-97_0


Referenceshttps://attackerkb.com/topics/cve-2022-22760
CVE - 2022-22760
http://www.mozilla.org/security/announce/2022/mfsa2022-04.html