CVE-2024-5698 — UI Misrepresentation / Clickjacking

Vendor	Product	Version range	Fixed in
debian	firefox	< firefox 127.0-1 (sid)	firefox 127.0-1 (sid)
mozilla	firefox	< 127	127
mozilla	firefox	—	—
mozilla	firefox	>= 0 < 127.0.2+build1-0ubuntu0.20.04.1	127.0.2+build1-0ubuntu0.20.04.1
mozilla	firefox	>= unspecified < 127	127

Ubuntu

Firefox vulnerabilities

vendor_ubuntu·2024-07-03·CVSS 8.1

CVE-2024-5693 [HIGH] Firefox vulnerabilities Title: Firefox vulnerabilities Summary: Several security issues were fixed in Firefox. Multiple security issues were discovered in Firefox. If a user were tricked into opening a specially crafted website, an attacker could potentially exploit these to cause a denial of service, obtain sensitive information across domains, or execute arbitrary code. (CVE-2024-5689, CVE-2024-5690, CVE-2024-5691, CVE-2024-5693, CVE-2024-5697, CVE-2024-5698, CVE-2024-5699, CVE-2024-5700, CVE-2024-5701) Lukas Bernhard discovered that Firefox did not properly manage memory during garbage collection. An attacker could potentially exploit this issue to cause a denial of service, or execute arbitrary code. (CVE-2024-5688) Lukas Bernhard discovered that Firefox did not properly manage memory in the JavaScript en

Debian

CVE-2024-5698: firefox - By manipulating the fullscreen feature while opening a data-list, an attacker co...

vendor_debian·2024·CVSS 6.1

CVE-2024-5698 [MEDIUM] CVE-2024-5698: firefox - By manipulating the fullscreen feature while opening a data-list, an attacker co... By manipulating the fullscreen feature while opening a data-list, an attacker could have overlaid a text box over the address bar. This could have led to user confusion and possible spoofing attacks. This vulnerability affects Firefox < 127. Scope: local sid: resolved (fixed in 127.0-1)

Mozilla

Mozilla Foundation Security Advisory 2024-25: CVE-2024-5698

vendor_mozilla·CVSS 6.1

CVE-2024-5698 [MEDIUM] Mozilla Foundation Security Advisory 2024-25: CVE-2024-5698 Mozilla Foundation Security Advisory 2024-25 CVE: CVE-2024-5698 Product: Firefox Impact: high Fixed in: Firefox 127

OSV

firefox vulnerabilities

osv·2024-07-03·CVSS 8.1

CVE-2024-5689 [HIGH] firefox vulnerabilities firefox vulnerabilities Multiple security issues were discovered in Firefox. If a user were tricked into opening a specially crafted website, an attacker could potentially exploit these to cause a denial of service, obtain sensitive information across domains, or execute arbitrary code. (CVE-2024-5689, CVE-2024-5690, CVE-2024-5691, CVE-2024-5693, CVE-2024-5697, CVE-2024-5698, CVE-2024-5699, CVE-2024-5700, CVE-2024-5701) Lukas Bernhard discovered that Firefox did not properly manage memory during garbage collection. An attacker could potentially exploit this issue to cause a denial of service, or execute arbitrary code. (CVE-2024-5688) Lukas Bernhard discovered that Firefox did not properly manage memory in the JavaScript engine. An attacker could potentially exploit this issue to obtain

OSV

CVE-2024-5698: By manipulating the fullscreen feature while opening a data-list, an attacker could have overlaid a text box over the address bar

osv·2024-06-11·CVSS 6.1

CVE-2024-5698 [MEDIUM] CVE-2024-5698: By manipulating the fullscreen feature while opening a data-list, an attacker could have overlaid a text box over the address bar By manipulating the fullscreen feature while opening a data-list, an attacker could have overlaid a text box over the address bar. This could have led to user confusion and possible spoofing attacks. This vulnerability affects Firefox < 127.

GHSA

GHSA-frpv-8jj9-m3cv: By manipulating the fullscreen feature while opening a data-list, an attacker could have overlaid a text box over the address bar

ghsa_unreviewed·2024-06-11

CVE-2024-5698 [MEDIUM] CWE-1021 GHSA-frpv-8jj9-m3cv: By manipulating the fullscreen feature while opening a data-list, an attacker could have overlaid a text box over the address bar By manipulating the fullscreen feature while opening a data-list, an attacker could have overlaid a text box over the address bar. This could have led to user confusion and possible spoofing attacks. This vulnerability affects Firefox < 127.

CVE-2024-5698: By manipulating the fullscreen feature while opening a data-list, an attacker could have overlaid a text box over the address bar. This could have led to user…

Affected

CVSS provenance