CVE-2024-11692 — Authentication Bypass by Spoofing in Mozilla Firefox
Severity
4.3MEDIUMNVD
EPSS
0.1%
top 75.04%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedNov 26
Latest updateDec 3
Description
An attacker could cause a select dropdown to be shown over another tab; this could have led to user confusion and possible spoofing attacks. This vulnerability affects Firefox < 133, Firefox ESR < 128.5, Thunderbird < 133, and Thunderbird < 128.5.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:NExploitability: 2.8 | Impact: 1.4
Affected Packages7 packages
🔴Vulnerability Details
4GHSA▶
GHSA-cpxj-fx45-9pgm: An attacker could cause a select dropdown to be shown over another tab; this could have led to user confusion and possible spoofing attacks↗2024-11-26
CVEList▶
CVE-2024-11692: An attacker could cause a select dropdown to be shown over another tab; this could have led to user confusion and possible spoofing attacks↗2024-11-26
OSV▶
CVE-2024-11692: An attacker could cause a select dropdown to be shown over another tab; this could have led to user confusion and possible spoofing attacks↗2024-11-26
📋Vendor Advisories
7Debian▶
CVE-2024-11692: firefox - An attacker could cause a select dropdown to be shown over another tab; this cou...↗2024