Lucene search

China National Vulnerability DatabaseCNVD-2024-14980

HistoryMar 21, 2024 - 12:00 a.m.

Multiple Mozilla product security bypass vulnerabilities (CNVD-2024-14980)

2024-03-2100:00:00

China National Vulnerability Database

www.cnvd.org.cn

mozilla

firefox

thunderbird

web browser

security bypass

vulnerability

mishandling

html

disclosure

csp random numbers

attacker

exploit

restrictions

6.4 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

10.3%

JSON

Mozilla Firefox is an open source web browser.Mozilla Firefox ESR is an extended support version of Firefox (the web browser).Mozilla Thunderbird is a suite of email client software separate from the Mozilla Application Suite. A security bypass vulnerability exists in several Mozilla products, which stems from mishandling of html and body tags leading to the disclosure of CSP random numbers. An attacker could exploit this vulnerability to bypass security restrictions.

CPENameOperatorVersion
mozilla firefox esrlt115.9
mozilla thunderbirdlt115.9

CPE	Name	Operator	Version
	mozilla firefox esr	lt	115.9
	mozilla thunderbird	lt	115.9