Orta CVSS 5.3
CVE-2024-9398: Firefox: güvenlik açığı
Açıklama (NVD)
By checking the result of calls to `window.open` with specifically set protocol handlers, an attacker could determine if the application which implements that protocol handler is installed. This vulnerability affects Firefox < 131, Firefox ESR < 128.3, Thunderbird < 128.3, and Thunderbird < 131.
Özet bilgiler
- Ürün
- Mozilla Firefox
- CVSS v3.1
- 5.3
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N - EPSS
- %0,57 (yüzdelik 47)
- CWE
- CWE-203
- Yama
- Yok / bilinmiyor
Etkilenen sürümler
| Ürün | Başlangıç | Bitiş | Düzeltildi |
|---|---|---|---|
| mozilla-firefox | — | — | 128.3.0 |
| mozilla-firefox | — | — | 131.0 |
| mozilla-thunderbird | — | — | 128.3 |
| mozilla-thunderbird | 129.0 | 129.0 | — |
| mozilla-thunderbird | 129.0 | 129.0 | — |
| mozilla-thunderbird | 129.0 | 129.0 | — |
| mozilla-thunderbird | 129.0 | 129.0 | — |
| mozilla-thunderbird | 129.0 | 129.0 | — |
| mozilla-thunderbird | 129.0 | 129.0 | — |