CVE-2024-5698

Summary

By manipulating the fullscreen feature while opening a data-list, an attacker could have overlaid a text box over the address bar. This could have led to user confusion and possible spoofing attacks. This vulnerability affects Firefox < 127.

Affected Software

Weaknesses

• Data-list could have overlaid address bar

ADP Enrichment

CISA ADP Vulnrichment

• SSVC:
• Exploitation: none
  • Automatable: no
  • Technical Impact: partial

CVE Program Container

Additional References

• https://bugzilla.mozilla.org/show_bug.cgi?id=1828259
• https://www.mozilla.org/security/advisories/mfsa2024-25/

References

• https://bugzilla.mozilla.org/show_bug.cgi?id=1828259
• https://www.mozilla.org/security/advisories/mfsa2024-25/

• ←Previous
• Next→