Mozilla Firefox and Thunderbird Same-Origin Policy Bypass Vulnerability

A same-origin policy bypass vulnerability has been identified in Mozilla Firefox versions prior to 143, as well as in Firefox ESR versions prior to 140.3. This vulnerability is also present in Thunderbird versions prior to 143 and Thunderbird ESR versions prior to 140.3. The issue arises in the Layout component and can potentially be exploited in browser or browser-like contexts.

Impact

Exploitation of this vulnerability allows for a same-origin policy bypass, which could lead to unauthorized access or manipulation of resources from different origins.

Remediation

Users can upgrade to Firefox 143, Firefox ESR 140.3, Thunderbird 143, or Thunderbird ESR 140.3 to address this vulnerability.