CVE-2024-5689

June 11, 2024, 1:54 p.m.

Awaiting Analysis
CVE has been marked for Analysis. Normally once in this state the CVE will be analyzed by NVD staff within 24 hours.

Products

Firefox

  • < 127

Source

security@mozilla.org

Tags

CVE-2024-5689 details

Published : June 11, 2024, 1:15 p.m.
Last Modified : June 11, 2024, 1:54 p.m.

Description

In addition to detecting when a user was taking a screenshot (XXX), a website was able to overlay the 'My Shots' button that appeared, and direct the user to a replica Firefox Screenshots page that could be used for phishing. This vulnerability affects Firefox < 127.

CVSS Score

1 2 3 4 5 6 7 8 9 10

Weakness

Weakness Name Description
This website uses the NVD API, but is not approved or certified by it.