Lucene search
Redhat.comRH:CVE-2024-5693HistoryJun 11, 2024 - 8:54 p.m.
CVE-2024-5693
2024-06-1120:54:06
redhat.com
access.redhat.com
6
cve-2024-5693
offscreen canvas
cross-origin tainting
image data
same-origin policy
firefox
esr
CVSS3
6.1
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
AI Score
6.1
Confidence
Low
EPSS
0
Percentile
10.3%
The Mozilla Foundation Security Advisory describes this flaw as: Offscreen Canvas did not properly track cross-origin tainting, which could be used to access image data from another site in violation of same-origin policy.
Related
vulnrichment
vulnrichment
CVE-2024-5693
2024-06-11 12:40:13
ubuntucve
ubuntucve
CVE-2024-5693
2024-06-11 00:00:00
debiancve
debiancve
CVE-2024-5693
2024-06-11 13:15:50
osv
osv
CGA-m89r-85rg-prfp
2024-07-15 22:02:10
CVE-2024-5693
2024-06-11 13:15:50
CGA-2qrh-m58r-8532
2024-07-15 21:50:28
alpinelinux
alpinelinux
CVE-2024-5693
2024-06-11 13:15:50
cve
cve
CVE-2024-5693
2024-06-11 13:15:50
cvelist
cvelist
CVE-2024-5693
2024-06-11 12:40:13
nvd
nvd
CVE-2024-5693
2024-06-11 13:15:50
wolfi
wolfi
CVE-2024-5693 vulnerabilities
2024-09-30 03:53:08
nessus
nessus
AlmaLinux 9 : firefox (ALSA-2024:3955)
2024-06-19 00:00:00
RHEL 8 : firefox (RHSA-2024:3950)
2024-06-17 00:00:00
RHEL 7 : firefox (RHSA-2024:3951)
2024-06-17 00:00:00
redhat
redhat
(RHSA-2024:3951) Important: firefox security update
2024-06-17 12:45:30
(RHSA-2024:3953) Important: firefox security update
2024-06-17 12:45:41
(RHSA-2024:3955) Important: firefox security update
2024-06-17 12:52:37
oraclelinux
oraclelinux
thunderbird security update
2024-06-20 00:00:00
firefox security update
2024-06-17 00:00:00
firefox security update
2024-06-17 00:00:00
openvas
openvas
Mozilla Firefox ESR Security Update (mfsa_2024-23_2024-26) - Mac OS X
2024-06-13 00:00:00
Debian: Security Advisory (DLA-3825-1)
2024-07-01 00:00:00
Mageia: Security Advisory (MGASA-2024-0231)
2024-06-24 00:00:00
rocky
rocky
firefox security update
2024-07-02 14:11:35
thunderbird security update
2024-07-02 14:11:35
thunderbird security update
2024-07-02 14:10:24
mageia
mageia
Updated thunderbird packages fix security vulnerabilities
2024-06-22 20:32:46
Updated nss & firefox packages fix security vulnerabilities
2024-06-16 02:07:50
ubuntu
ubuntu
Thunderbird vulnerabilities
2024-06-19 00:00:00
Firefox vulnerabilities
2024-07-03 00:00:00
almalinux
almalinux
Important: firefox security update
2024-06-17 00:00:00
Important: thunderbird security update
2024-06-20 00:00:00
Important: thunderbird security update
2024-06-20 00:00:00
debian
debian
[SECURITY] [DLA 3825-1] firefox-esr security update
2024-06-13 11:08:20
mozilla
mozilla
Security Vulnerabilities fixed in Thunderbird 115.12 — Mozilla
2024-06-13 00:00:00
Security Vulnerabilities fixed in Firefox ESR 115.12 — Mozilla
2024-06-11 00:00:00
Security Vulnerabilities fixed in Firefox 127 — Mozilla
2024-06-11 00:00:00
kaspersky
kaspersky
KLA68920 Multiple vulnerabilities in Mozilla Firefox ESR
2024-06-11 00:00:00
KLA68933 Multiple vulnerabilities in Mozilla Thunderbird
2024-06-13 00:00:00
KLA68921 Multiple vulnerabilities in Mozilla Firefox
2024-06-11 00:00:00
slackware
slackware
[slackware-security] mozilla-firefox
2024-06-11 21:55:08
redos
redos
ROS-20240814-05
2024-08-14 00:00:00
gentoo
gentoo
Mozilla Firefox: Multiple Vulnerabilities
2024-08-06 00:00:00
ibm
ibm
CVSS3
6.1
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
AI Score
6.1
Confidence
Low
EPSS
0
Percentile
10.3%
Related for RH:CVE-2024-5693