Malicious websites could have confused Firefox into showing the wrong origin when asking to launch a program and handling an external URL protocol. This vulnerability affects Firefox ESR < 91.5, Firefox < 96, and Thunderbird < 91.5.
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-22748.json"
[
{
"events": [
{
"introduced": "0"
},
{
"fixed": "96.0"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"fixed": "91.5"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"fixed": "91.5"
}
]
}
]