[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"repo-stars":3,"vuln-CVE-2022-45408":6},{"stargazers_count":4,"fetched_at":5},7,"2026-07-31T17:19:26.604Z",{"id":7,"descriptions":8,"cisa":9,"weaknesses":10,"exploits":51,"aliases":52,"duplicate_of":9,"upstream":53,"downstream":54,"duplicates":123,"related":124,"reserved_at":9,"published_at":135,"modified_at":136,"state":137,"summary":138,"references_raw":147,"kevs":168,"epss":169,"epss_history":172,"metrics":444,"affected":452},"CVE-2022-45408","Through a series of popups that reuse windowName, an attacker can cause a window to go fullscreen without the user seeing the notification prompt, resulting in potential user confusion or spoofing attacks. This vulnerability affects Firefox ESR \u003C 102.5, Thunderbird \u003C 102.5, and Firefox \u003C 107.",null,[11,18],{"_key":12,"id":12,"name":13,"description":14,"type":15,"status":16,"abstraction":9,"likelihood_of_exploit":9,"capec":17},"NVD-CWE-OTHER","Other","NVD uses this CWE ID when the weakness does not map to any existing CWE entry.","placeholder","NVD-Reserved",[],{"_key":19,"id":19,"name":20,"description":21,"type":22,"status":23,"abstraction":24,"likelihood_of_exploit":25,"capec":26},"CWE-79","Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')","The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.","weakness","Stable","Base","High",[27,31,35,39,43,47],{"id":28,"name":29,"techniques":30},"CAPEC-209","XSS Using MIME Type Mismatch",[],{"id":32,"name":33,"techniques":34},"CAPEC-588","DOM-Based XSS",[],{"id":36,"name":37,"techniques":38},"CAPEC-591","Reflected XSS",[],{"id":40,"name":41,"techniques":42},"CAPEC-592","Stored XSS",[],{"id":44,"name":45,"techniques":46},"CAPEC-63","Cross-Site Scripting (XSS)",[],{"id":48,"name":49,"techniques":50},"CAPEC-85","AJAX Footprinting",[],[],[],[],[55,57,59,61,63,65,67,69,71,73,75,77,79,81,83,85,87,89,91,93,95,97,99,101,103,105,107,109,111,113,115,117,119,121],{"_key":56},"SUSE-SU-2022:4247-1",{"_key":58},"RHSA-2022:8543",{"_key":60},"RHSA-2022:8544",{"_key":62},"RHSA-2022:8545",{"_key":64},"RHSA-2022:8547",{"_key":66},"RHSA-2022:8556",{"_key":68},"RHSA-2022:8561",{"_key":70},"RHSA-2022:8580",{"_key":72},"RHSA-2022:8979",{"_key":74},"RHSA-2022:8980",{"_key":76},"SUSE-SU-2022:4083-1",{"_key":78},"SUSE-SU-2022:4058-1",{"_key":80},"SUSE-SU-2022:4085-1",{"_key":82},"OPENSUSE-SU-2024:12518-1",{"_key":84},"OPENSUSE-SU-2024:12519-1",{"_key":86},"OPENSUSE-SU-2024:12532-1",{"_key":88},"OPENSUSE-SU-2024:14572-1",{"_key":90},"DLA-3196-1",{"_key":92},"DLA-3199-1",{"_key":94},"DSA-5282-1",{"_key":96},"DSA-5284-1",{"_key":98},"MGASA-2022-0427",{"_key":100},"MGASA-2022-0428",{"_key":102},"UBUNTU-CVE-2022-45408",{"_key":104},"USN-5726-1",{"_key":106},"USN-5824-1",{"_key":108},"DEBIAN-CVE-2022-45408",{"_key":110},"RHSA-2022:8552",{"_key":112},"RHSA-2022:8555",{"_key":114},"RHSA-2022:8548",{"_key":116},"RHSA-2022:8549",{"_key":118},"RHSA-2022:8550",{"_key":120},"RHSA-2022:8553",{"_key":122},"RHSA-2022:8554",[],[125,126,127,128,129,130,131,132,133,134],{"_key":56},{"_key":76},{"_key":78},{"_key":80},{"_key":82},{"_key":84},{"_key":86},{"_key":88},{"_key":98},{"_key":100},"2022-12-22T00:00:00.000Z","2025-04-15T14:41:54.553Z","Modified",{"cisa_kev":139,"cisa_ransomware":139,"cisa_vendor":9,"epss_severity":140,"epss_score":141,"severity":142,"severity_score":143,"severity_version":144,"severity_source":145,"severity_vector":146,"severity_status":137},false,"low",0.007,"medium",6.5,"v3.1","cve.org","CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",[148,154,158,162],{"url":149,"sources":150,"tags":152},"https://www.mozilla.org/security/advisories/mfsa2022-47/",[145,151],"nvd",[153],"Vendor Advisory",{"url":155,"sources":156,"tags":157},"https://www.mozilla.org/security/advisories/mfsa2022-49/",[145,151],[153],{"url":159,"sources":160,"tags":161},"https://www.mozilla.org/security/advisories/mfsa2022-48/",[145,151],[153],{"url":163,"sources":164,"tags":165},"https://bugzilla.mozilla.org/show_bug.cgi?id=1793829",[145,151],[166,167,153],"Issue Tracking","Permissions Required",[],{"date":170,"score":141,"percentile":171},"2026-07-06",0.48673,[173,177,180,183,186,189,192,195,198,201,204,207,210,213,216,220,223,225,228,231,234,237,240,243,246,249,252,255,258,261,264,267,270,272,275,278,281,284,287,290,292,295,298,301,304,307,310,313,316,319,322,326,329,332,335,338,341,344,347,350,353,356,359,362,365,368,371,375,378,381,384,387,390,393,396,399,402,405,408,411,414,417,420,423,426,429,432,435,438,441],{"date":174,"score":175,"percentile":176},"2025-11-04",0.00093,0.26899,{"date":178,"score":175,"percentile":179},"2025-11-05",0.26878,{"date":181,"score":175,"percentile":182},"2025-11-06",0.26889,{"date":184,"score":175,"percentile":185},"2025-11-07",0.26891,{"date":187,"score":175,"percentile":188},"2025-11-08",0.26887,{"date":190,"score":175,"percentile":191},"2025-11-09",0.26839,{"date":193,"score":175,"percentile":194},"2025-11-10",0.26805,{"date":196,"score":175,"percentile":197},"2025-11-11",0.26825,{"date":199,"score":175,"percentile":200},"2025-11-12",0.26864,{"date":202,"score":175,"percentile":203},"2025-11-13",0.26868,{"date":205,"score":175,"percentile":206},"2025-11-14",0.26855,{"date":208,"score":175,"percentile":209},"2025-11-15",0.26843,{"date":211,"score":175,"percentile":212},"2025-11-16",0.26801,{"date":214,"score":175,"percentile":215},"2025-11-17",0.26762,{"date":217,"score":218,"percentile":219},"2025-11-18",0.0033,0.52894,{"date":221,"score":218,"percentile":222},"2025-11-19",0.52908,{"date":224,"score":218,"percentile":219},"2025-11-20",{"date":226,"score":175,"percentile":227},"2025-11-21",0.26735,{"date":229,"score":175,"percentile":230},"2025-11-22",0.26736,{"date":232,"score":175,"percentile":233},"2025-11-23",0.26691,{"date":235,"score":175,"percentile":236},"2025-11-24",0.26662,{"date":238,"score":175,"percentile":239},"2025-11-25",0.26654,{"date":241,"score":175,"percentile":242},"2025-11-26",0.26643,{"date":244,"score":175,"percentile":245},"2025-11-27",0.26645,{"date":247,"score":175,"percentile":248},"2025-11-28",0.26613,{"date":250,"score":175,"percentile":251},"2025-11-29",0.26596,{"date":253,"score":175,"percentile":254},"2025-11-30",0.26555,{"date":256,"score":175,"percentile":257},"2025-12-01",0.26608,{"date":259,"score":175,"percentile":260},"2025-12-02",0.26632,{"date":262,"score":175,"percentile":263},"2025-12-03",0.26639,{"date":265,"score":175,"percentile":266},"2025-12-04",0.26574,{"date":268,"score":175,"percentile":269},"2025-12-05",0.26611,{"date":271,"score":175,"percentile":257},"2025-12-06",{"date":273,"score":175,"percentile":274},"2025-12-07",0.26576,{"date":276,"score":175,"percentile":277},"2025-12-08",0.26578,{"date":279,"score":175,"percentile":280},"2025-12-09",0.26636,{"date":282,"score":175,"percentile":283},"2025-12-10",0.26707,{"date":285,"score":175,"percentile":286},"2025-12-11",0.26725,{"date":288,"score":175,"percentile":289},"2025-12-12",0.26737,{"date":291,"score":175,"percentile":230},"2025-12-13",{"date":293,"score":175,"percentile":294},"2025-12-14",0.26698,{"date":296,"score":175,"percentile":297},"2025-12-15",0.26669,{"date":299,"score":175,"percentile":300},"2025-12-16",0.26679,{"date":302,"score":175,"percentile":303},"2025-12-17",0.26738,{"date":305,"score":175,"percentile":306},"2025-12-18",0.26789,{"date":308,"score":175,"percentile":309},"2025-12-19",0.268,{"date":311,"score":175,"percentile":312},"2025-12-20",0.26771,{"date":314,"score":175,"percentile":315},"2025-12-21",0.26733,{"date":317,"score":175,"percentile":318},"2025-12-22",0.26701,{"date":320,"score":175,"percentile":321},"2025-12-23",0.2667,{"date":323,"score":324,"percentile":325},"2025-12-24",0.00122,0.32037,{"date":327,"score":324,"percentile":328},"2025-12-25",0.3211,{"date":330,"score":324,"percentile":331},"2025-12-26",0.32096,{"date":333,"score":324,"percentile":334},"2025-12-27",0.32106,{"date":336,"score":324,"percentile":337},"2025-12-28",0.32031,{"date":339,"score":324,"percentile":340},"2025-12-29",0.31999,{"date":342,"score":324,"percentile":343},"2025-12-30",0.31992,{"date":345,"score":324,"percentile":346},"2025-12-31",0.32042,{"date":348,"score":324,"percentile":349},"2026-01-01",0.32186,{"date":351,"score":324,"percentile":352},"2026-01-02",0.32175,{"date":354,"score":324,"percentile":355},"2026-01-03",0.32155,{"date":357,"score":324,"percentile":358},"2026-01-04",0.32015,{"date":360,"score":324,"percentile":361},"2026-01-05",0.32002,{"date":363,"score":324,"percentile":364},"2026-01-06",0.32014,{"date":366,"score":324,"percentile":367},"2026-01-07",0.32036,{"date":369,"score":324,"percentile":370},"2026-01-08",0.32064,{"date":372,"score":373,"percentile":374},"2026-01-09",0.00146,0.35637,{"date":376,"score":373,"percentile":377},"2026-01-10",0.35639,{"date":379,"score":373,"percentile":380},"2026-01-11",0.35619,{"date":382,"score":373,"percentile":383},"2026-01-12",0.35558,{"date":385,"score":373,"percentile":386},"2026-01-13",0.35543,{"date":388,"score":373,"percentile":389},"2026-01-14",0.35588,{"date":391,"score":373,"percentile":392},"2026-01-15",0.35575,{"date":394,"score":373,"percentile":395},"2026-01-16",0.35594,{"date":397,"score":373,"percentile":398},"2026-01-17",0.35577,{"date":400,"score":373,"percentile":401},"2026-01-18",0.3552,{"date":403,"score":373,"percentile":404},"2026-01-19",0.3548,{"date":406,"score":373,"percentile":407},"2026-01-20",0.35462,{"date":409,"score":373,"percentile":410},"2026-01-21",0.35441,{"date":412,"score":373,"percentile":413},"2026-01-22",0.35426,{"date":415,"score":373,"percentile":416},"2026-01-23",0.35483,{"date":418,"score":373,"percentile":419},"2026-01-24",0.35493,{"date":421,"score":373,"percentile":422},"2026-01-25",0.35437,{"date":424,"score":373,"percentile":425},"2026-01-26",0.35369,{"date":427,"score":373,"percentile":428},"2026-01-27",0.35363,{"date":430,"score":373,"percentile":431},"2026-01-28",0.35342,{"date":433,"score":373,"percentile":434},"2026-01-29",0.35313,{"date":436,"score":373,"percentile":437},"2026-01-30",0.35305,{"date":439,"score":373,"percentile":440},"2026-01-31",0.35316,{"date":442,"score":373,"percentile":443},"2026-02-01",0.35423,[445,450],{"source":145,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":446,"cvss_v4_0":9},{"baseScore":143,"baseSeverity":447,"vectorString":146,"impactScore":448,"exploitabilityScore":449},"MEDIUM",6,7.2,{"source":151,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":451,"cvss_v4_0":9},{"baseScore":143,"baseSeverity":447,"vectorString":146,"impactScore":448,"exploitabilityScore":449},[453,470,479],{"ecosystem":9,"name":454,"vendor":455,"product":456,"cpe_part":457,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":458},"Firefox","mozilla","firefox","a",[459,466],{"version":460,"is_range":461,"range_type":145,"version_start":462,"version_start_type":463,"version_end":464,"version_end_type":465,"fixed_in":9},">= unspecified, \u003C 107",true,"unspecified","including","107","excluding",{"version":467,"is_range":461,"range_type":468,"version_start":9,"version_start_type":9,"version_end":469,"version_end_type":465,"fixed_in":9},"lt107.0","cpe","107.0",{"ecosystem":9,"name":471,"vendor":455,"product":472,"cpe_part":457,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":473},"firefox esr","firefox_esr",[474,477],{"version":475,"is_range":461,"range_type":145,"version_start":462,"version_start_type":463,"version_end":476,"version_end_type":465,"fixed_in":9},">= unspecified, \u003C 102.5","102.5",{"version":478,"is_range":461,"range_type":468,"version_start":9,"version_start_type":9,"version_end":476,"version_end_type":465,"fixed_in":9},"lt102.5",{"ecosystem":9,"name":480,"vendor":455,"product":481,"cpe_part":457,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":482},"Thunderbird","thunderbird",[483,484],{"version":475,"is_range":461,"range_type":145,"version_start":462,"version_start_type":463,"version_end":476,"version_end_type":465,"fixed_in":9},{"version":478,"is_range":461,"range_type":468,"version_start":9,"version_start_type":9,"version_end":476,"version_end_type":465,"fixed_in":9}]