Lucene search
MozillaVULNRICHMENT:CVE-2024-9397HistoryOct 01, 2024 - 3:13 p.m.
CVE-2024-9397
2024-10-0115:13:20
mozilla
github.com
delay
directory upload
clickjacking
vulnerability
firefox
thunderbird
A missing delay in directory upload UI could have made it possible for an attacker to trick a user into granting permission via clickjacking. This vulnerability affects Firefox < 131, Firefox ESR < 128.3, Thunderbird < 128.3, and Thunderbird < 131.
Related
debiancve
debiancve
CVE-2024-9397
2024-10-01 16:15:10
cvelist
cvelist
CVE-2024-9397
2024-10-01 15:13:20
nvd
nvd
CVE-2024-9397
2024-10-01 16:15:10
cve
cve
CVE-2024-9397
2024-10-01 16:15:10
alpinelinux
alpinelinux
CVE-2024-9397
2024-10-01 16:15:10
mozilla
mozilla
Security Vulnerabilities fixed in Thunderbird 131 — Mozilla
2024-10-01 00:00:00
Security Vulnerabilities fixed in Firefox ESR 128.3 — Mozilla
2024-10-01 00:00:00
Security Vulnerabilities fixed in Thunderbird 128.3 — Mozilla
2024-10-01 00:00:00
nessus
nessus
Mozilla Firefox ESR < 128.3
2024-10-01 00:00:00
Mozilla Firefox ESR < 128.3
2024-10-01 00:00:00
Mozilla Firefox < 131.0
2024-10-01 00:00:00
AI Score
6
Confidence
Low
SSVC
Exploitation
none
Automatable
no
Technical Impact
partial
Related for VULNRICHMENT:CVE-2024-9397