If a document created a sandboxed iframe without `allow-scripts`, and subsequently appended an element to the iframe's document that e.g. had a JavaScript event handler - the event handler would have run despite the iframe's sandbox. External Reference: https://www.mozilla.org/en-US/security/advisories/mfsa2022-05/#CVE-2022-22759
This issue has been addressed in the following products: Red Hat Enterprise Linux 8.1 Update Services for SAP Solutions Via RHSA-2022:0513 https://access.redhat.com/errata/RHSA-2022:0513
This issue has been addressed in the following products: Red Hat Enterprise Linux 8.2 Extended Update Support Via RHSA-2022:0512 https://access.redhat.com/errata/RHSA-2022:0512
This issue has been addressed in the following products: Red Hat Enterprise Linux 8.4 Extended Update Support Via RHSA-2022:0511 https://access.redhat.com/errata/RHSA-2022:0511
This issue has been addressed in the following products: Red Hat Enterprise Linux 8 Via RHSA-2022:0510 https://access.redhat.com/errata/RHSA-2022:0510
This issue has been addressed in the following products: Red Hat Enterprise Linux 7 Via RHSA-2022:0514 https://access.redhat.com/errata/RHSA-2022:0514
This bug is now closed. Further updates for individual products will be reflected on the CVE page(s): https://access.redhat.com/security/cve/cve-2022-22759
This issue has been addressed in the following products: Red Hat Enterprise Linux 8.1 Update Services for SAP Solutions Via RHSA-2022:0539 https://access.redhat.com/errata/RHSA-2022:0539
This issue has been addressed in the following products: Red Hat Enterprise Linux 8 Via RHSA-2022:0535 https://access.redhat.com/errata/RHSA-2022:0535
This issue has been addressed in the following products: Red Hat Enterprise Linux 8.2 Extended Update Support Via RHSA-2022:0537 https://access.redhat.com/errata/RHSA-2022:0537
This issue has been addressed in the following products: Red Hat Enterprise Linux 8.4 Extended Update Support Via RHSA-2022:0536 https://access.redhat.com/errata/RHSA-2022:0536
This issue has been addressed in the following products: Red Hat Enterprise Linux 7 Via RHSA-2022:0538 https://access.redhat.com/errata/RHSA-2022:0538