Lucene search

K
nvd[email protected]NVD:CVE-2024-4769
HistoryMay 14, 2024 - 6:15 p.m.

CVE-2024-4769

2024-05-1418:15:14
web.nvd.nist.gov
web workers
error messages
cross-origin

5.2 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

10.4%

When importing resources using Web Workers, error messages would distinguish the difference between application/javascript responses and non-script responses. This could have been abused to learn information cross-origin. This vulnerability affects Firefox < 126, Firefox ESR < 115.11, and Thunderbird < 115.11.