CVE-2024-5689

Summary

In addition to detecting when a user was taking a screenshot (XXX), a website was able to overlay the 'My Shots' button that appeared, and direct the user to a replica Firefox Screenshots page that could be used for phishing. This vulnerability affects Firefox < 127.

Affected Software

VendorProductVersion RangeStatus
MozillaFirefoxunspecified < 127affected

Weaknesses

  • User confusion and possible phishing vector via Firefox Screenshots

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: yes
    • Technical Impact: total

CVE Program Container

Additional References

References