Oval Definition:	oval:org.opensuse.security:def:202240956
Revision Date: 2023-06-22 Version: 1 Title: CVE-2022-40956 Description: When injecting an HTML base element, some requests would ignore the CSP's base-uri settings and accept the injected element's base instead. This vulnerability affects Firefox ESR < 102.3, Thunderbird < 102.3, and Firefox < 105. Family: unix Class: vulnerability Status: Reference(s): Mitre CVE-2022-40956 SUSE CVE-2022-40956 SUSE-SU-2022:3396-1 SUSE-SU-2022:3440-1 SUSE-SU-2022:3441-1 SUSE-SU-2022:3800-1 Platform(s): SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Desktop Applications 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 Product(s): Definition Synopsis Release Information SUSE Linux Enterprise Desktop 15 SP5 is installed OR SUSE Linux Enterprise High Performance Computing 15 SP5 is installed OR SUSE Linux Enterprise Module for Desktop Applications 15 SP5 is installed OR SUSE Linux Enterprise Server 15 SP5 is installed OR SUSE Linux Enterprise Server for SAP Applications 15 SP5 is installed AND Package Information MozillaFirefox-102.11.0-150200.152.87.1 is installed OR MozillaFirefox-devel-102.11.0-150200.152.87.1 is installed OR MozillaFirefox-translations-common-102.11.0-150200.152.87.1 is installed OR MozillaFirefox-translations-other-102.11.0-150200.152.87.1 is installed
BACK