Description
When receiving an HTML email that contained an <code>iframe</code> element, which used a <code>srcdoc</code> attribute to define the inner HTML document, remote objects specified in the nested document, for example images or videos, were not blocked. Rather, the network was accessed, the objects were loaded and displayed. This vulnerability affects Thunderbird < 102.2.1 and Thunderbird < 91.13.1.
References (3)
Core 3
Core References
Permissions Required
https://bugzilla.mozilla.org/show_bug.cgi?id=1783831
Vendor Advisory
https://www.mozilla.org/security/advisories/mfsa2022-38/
Vendor Advisory
https://www.mozilla.org/security/advisories/mfsa2022-39/
Scores
CVSS v3
6.5
EPSS
0.0066
EPSS Percentile
46.7%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
CISA SSVC
Vulnrichment
Exploitation
none
Automatable
no
Technical Impact
partial
Details
CWE
CWE-610
Status
published
Products (1)
mozilla/thunderbird
< 91.13.1
Published
Dec 22, 2022
Tracked Since
Feb 18, 2026