GHSA-qjrp-xgm3-mxhj

GHSA-qjrp-xgm3-mxhj PUBLISHED

Record from GitHub Advisory Database · Published May 3, 2022

Mozilla Firefox before 1.5.0.5, Thunderbird before 1.5.0.5, and SeaMonkey before 1.0.3 allows remote attackers to reference remote files and possibly load chrome: URLs by tricking the user into copying or dragging links.

Timeline

May 3, 2022 CVE Published
Apr 9, 2026 Security Advisory (4 in total, the first dated here)
Apr 30, 2026 Distribution Patch (2 in total, the first dated here)

Query this with the API

The same record, from the CLI:

vulnetix vdb vuln GHSA-qjrp-xgm3-mxhj
vulnetix vdb fixes GHSA-qjrp-xgm3-mxhj

Or with curl, using the org id and key from your account page:

curl -s -H "Authorization: ApiKey ${VULNETIX_ORG_ID}:${VULNETIX_API_KEY}" \
  "https://api.vdb.vulnetix.com/v2/vuln/GHSA-qjrp-xgm3-mxhj/fixes/registry"

The Community plan is free and allows 50 queries a day. Get a free API key · API quickstart

References

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11013 url
http://secunia.com/advisories/21229 url
http://secunia.com/advisories/21343 url
http://secunia.com/advisories/21529 url
http://secunia.com/advisories/21631 url
http://securitytracker.com/id?1016586 url
http://www.mandriva.com/security/advisories?name=MDKSA-2006:146 url
http://www.securityfocus.com/archive/1/441333/100/0/threaded url
http://www.securityfocus.com/archive/1/446658/100/200/threaded url
http://www.securityfocus.com/bid/19181 url
http://www.vupen.com/english/advisories/2008/0083 url
https://exchange.xforce.ibmcloud.com/vulnerabilities/27993 url
http://secunia.com/advisories/21243 url
http://secunia.com/advisories/21246 url
http://secunia.com/advisories/21270 url
http://secunia.com/advisories/21607 url
http://secunia.com/advisories/22055 url
http://secunia.com/advisories/22210 url
http://securitytracker.com/id?1016587 url
http://www.mandriva.com/security/advisories?name=MDKSA-2006:145 url

…and 26 more

Look up in the Resolve Platform →