1. Home
  2. Security Advisories
  3. Mozilla
  4. MFSA-2022-29

[MFSA-2022-29] Security Vulnerabilities fixed in Firefox ESR 91.12

Severity Moderate
Affected Packages 1
Fixed Packages 1
CVEs 2
Info Packages References Vulnerabilities

  • CVE-2022-36318: Directory indexes for bundled resources reflected URL parameters (moderate)
    When visiting directory listings for chrome:// URLs as source text, some parameters were reflected.

  • CVE-2022-36319: Mouse Position spoofing with CSS transforms (moderate)
    When combining CSS properties for overflow and transform, the mouse cursor could interact with different coordinates than displayed.

Package Affected Version
pkg:mozilla/Firefox%20ESR < 91.12
Package Fixed Version
pkg:mozilla/Firefox%20ESR = 91.12
ID
MFSA-2022-29
Severity
moderate
URL
https://www.mozilla.org/en-US/security/advisories/mfsa2022-29
Published
2022-07-26T00:00:00
(2 years ago)
Modified
2022-07-26T00:00:00
(2 years ago)
Other Advisories
Type Package URL Namespace Name / Product Version Distribution / Platform Arch Patch / Fix
Affected pkg:mozilla/Firefox%20ESR Firefox ESR < 91.12
Fixed pkg:mozilla/Firefox%20ESR Firefox ESR = 91.12
# CVE Description CVSS EPSS EPSS Trend (30 days) Affected Products Weaknesses Security Advisories Exploits PoC Pubblication Date Modification Date
# CVE Description CVSS EPSS EPSS Trend (30 days) Affected Products Weaknesses Security Advisories PoC Pubblication Date Modification Date