Vulnerabilities > CVE-2024-5691 - Unspecified vulnerability in Mozilla Firefox

047910
CVSS 4.7 - MEDIUM
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
NONE
Integrity impact
LOW
Availability impact
NONE
network
low complexity
mozilla
NVD
Published: 2024-06-11
Updated: 2024-11-21

Summary

By tricking the browser with a `X-Frame-Options` header, a sandboxed iframe could have presented a button that, if clicked by a user, would bypass restrictions to open a new window. This vulnerability affects Firefox < 127, Firefox ESR < 115.12, and Thunderbird < 115.12.

Vulnerable Configurations

Part Description Count
Application
Mozilla
1686

References