Navigations were being allowed when dragging a URL from a cross-origin iframe into the same tab which could lead to website spoofing attacks. This vulnerability affects Firefox < 109, Thunderbird < 102.7, and Firefox ESR < 102.7.
The product does not properly verify that the source of data or communication is valid.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Firefox | Mozilla | * | 109.0 (excluding) |
| Firefox_esr | Mozilla | * | 102.7 (excluding) |
| Thunderbird | Mozilla | * | 102.7 (excluding) |