CVE-2022-29911 - log back

CVE-2022-29911 edited at 16 May 2022 19:57:57
Type
- Unknown
+ Arbitrary code execution
References
https://bugzilla.mozilla.org/show_bug.cgi?id=1761981
+ https://www.mozilla.org/en-US/security/advisories/mfsa2022-16/#CVE-2022-29911
+ https://www.mozilla.org/en-US/security/advisories/mfsa2022-18/#CVE-2022-29911
CVE-2022-29911 edited at 14 May 2022 19:40:53
Severity
- Unknown
+ High
Remote
- Unknown
+ Remote
Description
+ An improper implementation of the new iframe sandbox keyword allow-top-navigation-by-user-activation could lead to script execution without allow-scripts being present.
References
+ https://bugzilla.mozilla.org/show_bug.cgi?id=1761981
Notes
CVE-2022-29911 created at 14 May 2022 19:37:10