CVE-2022-1887

Publication date 22 December 2022

Last updated 25 August 2025

Ubuntu priority

Cvss 3 Severity Score

The search term could have been specified externally to trigger SQL injection. This vulnerability affects Firefox for iOS < 101.

Show unmaintained releases

Package	Ubuntu Release	Status
firefox	22.10 kinetic	Not affected
	22.04 LTS jammy	Not affected
	20.04 LTS focal	Not in release
	18.04 LTS bionic	Not affected
	16.04 LTS xenial	Ignored end of standard support
	14.04 LTS trusty	Ignored end of standard support

starting with Ubuntu 22.04, the firefox package is just a script that installs the Firefox snap

Only affects Firefox for iOS

CVSS version: CVSS v3.0

Base score 9.8 · Critical

Base metrics

Scores

Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H