CVE-2024-9398

2024-10-0115:13:20

mozilla

github.com

window.open

protocol handlers

attacker

application

firefox

thunderbird

AI Score

5.9

Confidence

Low

SSVC

Exploitation

none

Automatable

Technical Impact

partial

JSON

By checking the result of calls to window.open with specifically set protocol handlers, an attacker could determine if the application which implements that protocol handler is installed. This vulnerability affects Firefox < 131, Firefox ESR < 128.3, Thunderbird < 128.3, and Thunderbird < 131.