Lucene search
HistoryJun 11, 2024 - 1:15 p.m.
CVE-2024-5691
browser
x-frame-options
iframe
button
restrictions
new window
firefox
esr
0.0004 Low
EPSS
Percentile
10.4%
By tricking the browser with a X-Frame-Options header, a sandboxed iframe could have presented a button that, if clicked by a user, would bypass restrictions to open a new window. This vulnerability affects Firefox < 127, Firefox ESR < 115.12, and Thunderbird < 115.12.
References
bugzilla.mozilla.org/show_bug.cgi?id=1888695
lists.debian.org/debian-lts-announce/2024/06/msg00000.html
lists.debian.org/debian-lts-announce/2024/06/msg00010.html
www.mozilla.org/security/advisories/mfsa2024-25/
www.mozilla.org/security/advisories/mfsa2024-26/
www.mozilla.org/security/advisories/mfsa2024-28/
Related
ubuntucve
ubuntucve
CVE-2024-5691
2024-06-11 00:00:00
vulnrichment
vulnrichment
CVE-2024-5691
2024-06-11 12:40:13
debiancve
debiancve
CVE-2024-5691
2024-06-11 13:15:50
redhatcve
redhatcve
CVE-2024-5691
2024-06-11 20:53:46
cve
cve
CVE-2024-5691
2024-06-11 13:15:50
cvelist
cvelist
CVE-2024-5691
2024-06-11 12:40:13
alpinelinux
alpinelinux
CVE-2024-5691
2024-06-11 13:15:50
wolfi
wolfi
CVE-2024-5691 vulnerabilities
2024-07-01 09:08:36
nessus
nessus
Debian dsa-5709 : firefox-esr - security update
2024-06-12 00:00:00
RHEL 8 : thunderbird (RHSA-2024:4003)
2024-06-20 00:00:00
RHEL 9 : thunderbird (RHSA-2024:4002)
2024-06-20 00:00:00
oraclelinux
oraclelinux
firefox security update
2024-06-17 00:00:00
firefox security update
2024-06-17 00:00:00
firefox security update
2024-06-17 00:00:00
almalinux
almalinux
Important: thunderbird security update
2024-06-20 00:00:00
Important: firefox security update
2024-06-17 00:00:00
Important: thunderbird security update
2024-06-20 00:00:00
osv
osv
thunderbird - security update
2024-06-19 00:00:00
thunderbird vulnerabilities
2024-06-19 02:46:18
Important: thunderbird security update
2024-06-20 00:00:00
openvas
openvas
Ubuntu: Security Advisory (USN-6840-1)
2024-06-19 00:00:00
Debian: Security Advisory (DSA-5711-1)
2024-07-01 00:00:00
Debian: Security Advisory (DSA-5709-1)
2024-07-01 00:00:00
mageia
mageia
Updated thunderbird packages fix security vulnerabilities
2024-06-22 20:32:46
Updated nss & firefox packages fix security vulnerabilities
2024-06-16 02:07:50
ubuntu
ubuntu
Thunderbird vulnerabilities
2024-06-19 00:00:00
debian
debian
[SECURITY] [DLA 3825-1] firefox-esr security update
2024-06-13 11:08:20
kaspersky
kaspersky
KLA68920 Multiple vulnerabilities in Mozilla Firefox ESR
2024-06-11 00:00:00
KLA68933 Multiple vulnerabilities in Mozilla Thunderbird
2024-06-13 00:00:00
KLA68921 Multiple vulnerabilities in Mozilla Firefox
2024-06-11 00:00:00
mozilla
mozilla
Security Vulnerabilities fixed in Firefox ESR 115.12 — Mozilla
2024-06-11 00:00:00
Security Vulnerabilities fixed in Thunderbird 115.12 — Mozilla
2024-06-13 00:00:00
Security Vulnerabilities fixed in Firefox 127 — Mozilla
2024-06-11 00:00:00
slackware
slackware
[slackware-security] mozilla-firefox
2024-06-11 21:55:08