Lucene search

K
alpinelinuxAlpine Linux Development TeamALPINE:CVE-2024-5691
HistoryJun 11, 2024 - 1:15 p.m.

CVE-2024-5691

2024-06-1113:15:50
Alpine Linux Development Team
security.alpinelinux.org
6
browser
security
bypass
x-frame-options
firefox
vulnerability

AI Score

5.4

Confidence

Low

EPSS

0.001

Percentile

22.2%

By tricking the browser with a X-Frame-Options header, a sandboxed iframe could have presented a button that, if clicked by a user, would bypass restrictions to open a new window. This vulnerability affects Firefox < 127, Firefox ESR < 115.12, and Thunderbird < 115.12.

OSVersionArchitecturePackageVersionFilename
Alpine3.20-communitynoarchfirefox= 126.0.1-r0UNKNOWN
Alpine3.20-communitynoarchthunderbird= 115.11.0-r0UNKNOWN