VULNERABILITY INTELLIGENCE

CVE-2022-36318

CVSS score5.3 MEDIUM

EPSS probability0.53%

CISA KEVNot currently listed

Published2022-12-22

Last modified2026-06-17

Description

When visiting directory listings for `chrome://` URLs as source text, some parameters were reflected. This vulnerability affects Firefox ESR < 102.1, Firefox ESR < 91.12, Firefox < 103, Thunderbird < 102.1, and Thunderbird < 91.12.