CVE:CVE-2022-22759
CNNVD:CNNVD-202202-579
Mozilla Firefox是美国Mozilla基金会的一款开源Web浏览器。
Mozilla Firefox 中存在权限许可和访问控制问题漏洞，该漏洞源于产品中由文档创建的沙箱缺少有效的权限管理措施。攻击者可通过该漏洞绕过安全限制。
solution:Upgrade mozilla firefox to a higher version than 97.0,and avoid the version (,97.0); Upgrade mozilla firefox_esr to a higher version than 91.6,and avoid the version (,91.6); Upgrade mozilla thunderbird to a higher version than 91.6,and avoid the version (,91.6)