SUSE-SU-2022:2313-1: MozillaFirefox&distro=openSUSE Leap 15.3

CVSS: UnknownPublished
Published 06-07-2022Last modified 04-02-2026
Open JSON

Vulnerability summary

SUSE-SU-2022:2313-1 is a vulnerability in MozillaFirefox&distro=openSUSE Leap 15.3 with no CVSS score yet.

Overall risk
0/100
0100
Minimal · default modelHow is this calculated?
CVSS score
Not scored
010
No CVSS score recorded
EPSS score
Not scored
0%100%
No EPSS score yet
KEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded

Advisory lineage

Upstream 9 · Downstream 0 · Related 9
CVE-2022-2200CVE-2022-31744CVE-2022-34468CVE-2022-34470CVE-2022-34472CVE-2022-34478

Timeline

  1. 06-07-2022
    PublishedVulnerability first disclosed.
  2. 04-02-2026
    Last modifiedVulnerability information updated.

Description

Security update for MozillaFirefox This update for MozillaFirefox fixes the following issues: Update to Firefox Extended Support Release 91.11.0 ESR (MFSA 2022-25) (bsc#1200793): - CVE-2022-2200: Undesired attributes could be set as part of prototype pollution (bmo#1771381) - CVE-2022-31744: CSP bypass enabling stylesheet injection (bmo#1757604) - CVE-2022-34468: CSP sandbox header without `allow-scripts` can be bypassed via retargeted javascript: URI (bmo#1768537) - CVE-2022-34470: Use-after-free in nsSHistory (bmo#1765951) - CVE-2022-34472: Unavailable PAC file resulted in OCSP requests being blocked (bmo#1770123) - CVE-2022-34478: Microsoft protocols can be attacked if a user accepts a prompt (bmo#1773717) - CVE-2022-34479: A popup window could be resized in a way to overlay the address bar with web content (bmo#1745595) - CVE-2022-34481: Potential integer overflow in ReplaceElementsAt (bmo#1497246) - CVE-2022-34484: Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11 (bmo#1763634, bmo#1772651)

CVSS metrics

Risk metrics not yet published.

EPSS trend

No EPSS score has been published for this record yet.

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

No weakness data has been published for this record.

Affected systems

Suse11 products
  • MozillaFirefox&distro=SUSE Enterprise Storage 7< 91.11.0-150200.152.48.1
  • MozillaFirefox&distro=SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS< 91.11.0-150200.152.48.1
  • MozillaFirefox&distro=SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS< 91.11.0-150200.152.48.1
  • MozillaFirefox&distro=SUSE Linux Enterprise Module for Desktop Applications 15 SP3< 91.11.0-150200.152.48.1
  • MozillaFirefox&distro=SUSE Linux Enterprise Module for Desktop Applications 15 SP4< 91.11.0-150200.152.48.1
Opensuse2 products
  • MozillaFirefox&distro=openSUSE Leap 15.3< 91.11.0-150200.152.48.1
  • MozillaFirefox&distro=openSUSE Leap 15.4< 91.11.0-150200.152.48.1

2 vendors · 13 products

References

11 links
Show all 11 references