Description
By checking the result of calls to `window.open` with specifically set protocol handlers, an attacker could determine if the application which implements that protocol handler is installed. This vulnerability affects Firefox < 131, Firefox ESR < 128.3, Thunderbird < 128.3, and Thunderbird < 131.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Mozilla Firefox
unspecified to < 131affected
Mozilla Firefox ESR
unspecified to < 128.3affected
Mozilla Thunderbird
unspecified to < 128.3affected
Mozilla Thunderbird
unspecified to < 131affected