Lucene search

K
nvd[email protected]NVD:CVE-2024-4773
HistoryMay 14, 2024 - 6:15 p.m.

CVE-2024-4773

2024-05-1418:15:15
CWE-601
web.nvd.nist.gov
6
network error
firefox
security vulnerability
spoofed website

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

AI Score

5.5

Confidence

Low

EPSS

0.001

Percentile

25.8%

When a network error occurred during page load, the prior content could have remained in view with a blank URL bar. This could have been used to obfuscate a spoofed web site. This vulnerability affects Firefox < 126.

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

AI Score

5.5

Confidence

Low

EPSS

0.001

Percentile

25.8%