Cross-site request forgery In thunderbird
Description
A flaw was found in Firefox. The Mozilla Foundation's Security Advisory describes the following issue: A security vulnerability in Firefox allowed malicious sites to use redirects to send credentialed requests to arbitrary endpoints on any site that had invoked the Storage Access API. This enabled potential Cross-Site Request Forgery attacks across origins.
Mitigation
Update Impact
Minimal update. May introduce new vulnerabilities or breaking changes.
Ecosystem | Component |
|---|---|
 rpm rhel7 | |
rpm rhel6 | |
rpm rhel6 |
Aliases
1. 2. 3.