Lucene search

K
vulnrichmentMozillaVULNRICHMENT:CVE-2024-8386
HistorySep 03, 2024 - 12:32 p.m.

CVE-2024-8386

2024-09-0312:32:19
mozilla
github.com
2
spoofing attack
select elements
firefox.

AI Score

6.6

Confidence

High

EPSS

0.001

Percentile

21.1%

SSVC

Exploitation

none

Automatable

no

Technical Impact

partial

If a site had been granted the permission to open popup windows, it could cause Select elements to appear on top of another site to perform a spoofing attack. This vulnerability affects Firefox < 130, Firefox ESR < 128.2, and Thunderbird < 128.2.

AI Score

6.6

Confidence

High

EPSS

0.001

Percentile

21.1%

SSVC

Exploitation

none

Automatable

no

Technical Impact

partial