Lucene search

Alpine Linux Development TeamALPINE:CVE-2024-7523

HistoryAug 06, 2024 - 1:15 p.m.

CVE-2024-7523

2024-08-0613:15:57

Alpine Linux Development Team

security.alpinelinux.org

android

firefox

security prompts

malicious site

permissions

vulnerability

select option

cve-2024-7523

unix

CVSS3

8.1

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N

AI Score

6.3

Confidence

Low

EPSS

0.001

Percentile

39.6%

JSON

A select option could partially obscure security prompts. This could be used by a malicious site to trick a user into granting permissions.
This issue only affects Android versions of Firefox. This vulnerability affects Firefox < 129.

OSVersionArchitecturePackageVersionFilename
Alpine3.20-communitynoarchfirefox= 128.0.3-r0UNKNOWN

OS	Version	Architecture	Package	Version	Filename
Alpine	3.20-community	noarch	firefox	= 128.0.3-r0	UNKNOWN

CVSS3

8.1

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N

AI Score

6.3

Confidence

Low

EPSS

0.001

Percentile

39.6%

JSON

Related for ALPINE:CVE-2024-7523