VDB

CVE-2017-7787

CVE-2017-7787 PUBLISHED CVSS 7.5 HIGH

Same-origin policy protections can be bypassed on pages with embedded iframes during page reloads, allowing the iframes to access content on the top level page, leading to information disclosure. This vulnerability affects Thunderbird < 52.3, Firefox ESR < 52.3, and Firefox < 55.

EPSS 2.35% · 82.9th percentile

Risk Scores

CVSS 3.0
7.5
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
EPSS Score
2.35%
82.9th percentile

Affected Products

VendorProductVersions
Ubuntu:14.04:LTSfirefox46.0+build5-0ubuntu0.14.04.2, 43.0.4+build3-0ubuntu0.14.04.1, 44.0.1+build2-0ubuntu0.14.04.1
Ubuntu:16.04:LTSthunderbird*, *, 1:52.2.1+build1-0ubuntu0.16.04.1
Ubuntu:18.04:LTSthunderbird0
Ubuntu:14.04:LTSthunderbird1:38.7.2+build1-0ubuntu0.14.04.1, *, *
Ubuntu:16.04:LTSfirefox41.0.2+build2-0ubuntu1, 44.0+build3-0ubuntu2, 44.0.1+build1-0ubuntu1

Timeline

  • Aug 8, 2017 CVE Published
  • Apr 14, 2021 EPSS Score
  • Jun 23, 2021 EPSS Score
  • Aug 25, 2021 EPSS Score
  • Dec 29, 2021 EPSS Score
  • Feb 4, 2022 EPSS Score
  • Mar 2, 2022 EPSS Score
  • May 4, 2022 EPSS Score
  • Jul 6, 2022 EPSS Score
  • Sep 7, 2022 EPSS Score
  • Jan 11, 2023 EPSS Score
  • Mar 7, 2023 EPSS Score

References

Open in Interactive Console →
$ Console Community · 100/wk Open console ›