Lucene search

K
alpinelinuxAlpine Linux Development TeamALPINE:CVE-2024-5693
HistoryJun 11, 2024 - 1:15 p.m.

CVE-2024-5693

2024-06-1113:15:50
Alpine Linux Development Team
security.alpinelinux.org
1
offscreen canvas
cross-origin tainting
firefox esr
same-origin policy
image data access

5.5 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

10.4%

Offscreen Canvas did not properly track cross-origin tainting, which could be used to access image data from another site in violation of same-origin policy. This vulnerability affects Firefox < 127, Firefox ESR < 115.12, and Thunderbird < 115.12.

OSVersionArchitecturePackageVersionFilename
Alpine3.20-communitynoarchfirefox= 126.0.1-r0UNKNOWN
Alpine3.20-communitynoarchthunderbird= 115.11.0-r0UNKNOWN