Related Vulnerabilities: CVE-2022-29909  

Documents in deeply-nested cross-origin browsing contexts could have obtained permissions granted to the top-level origin, bypassing the existing prompt and wrongfully inheriting the top-level permissions.

Severity High

Remote Yes

Type Unknown

Description

Documents in deeply-nested cross-origin browsing contexts could have obtained permissions granted to the top-level origin, bypassing the existing prompt and wrongfully inheriting the top-level permissions.

AVG-2710 thunderbird 91.8.1-1 91.9-1 High Fixed

AVG-2709 firefox 99.0.1-1 100.0-1 High Fixed

https://bugzilla.mozilla.org/show_bug.cgi?id=1755081