CVE-2024-11700

HIGH

8.1

Description

Malicious websites may have been able to perform user intent confirmation through tapjacking. This could have led to users unknowingly approving the launch of external applications, potentially exposing them to underlying vulnerabilities. This vulnerability affects Firefox < 133 and Thunderbird < 133.

Details CVE

Score CVSS v3.18.1

SeveriteHIGH

Vecteur CVSSCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N

Vecteur d'attaqueNETWORK

ComplexiteLOW

Privileges requisNONE

Interaction utilisateurREQUIRED

Publie11/26/2024

Derniere modification4/3/2025

Sourcenvd

Observations honeypot0

Produits affectes

mozilla:firefoxmozilla:thunderbird

Faiblesses (CWE)

CWE-1021

References

https://bugzilla.mozilla.org/show_bug.cgi?id=1836921(security@mozilla.org)

https://www.mozilla.org/security/advisories/mfsa2024-63/(security@mozilla.org)

https://www.mozilla.org/security/advisories/mfsa2024-67/(security@mozilla.org)

Correlations IOC

Aucune correlation enregistree

This product uses data from the NVD API but is not endorsed or certified by the NVD.