CVE-2024-5693

CVE-2024-5693

Name

CVE-2024-5693

Description

Offscreen Canvas did not properly track cross-origin tainting, which could be used to access image data from another site in violation of same-origin policy. This vulnerability affects Firefox < 127, Firefox ESR < 115.12, and Thunderbird < 115.12.

NVD Severity

unknown

Other trackers

CVE, NVD, CERT, CVE Details, CIRCL, Arch Linux, Debian, Red Hat, Ubuntu, Gentoo, SUSE (Bugzilla), SUSE (CVE), Mageia

Mailing lists

oss-security, full-disclosure, bugtraq

Exploits

Exploit DB, Metasploit

Forges

GitHub (code, issues), Aports (code, issues)

Type	URI
	https://bugzilla.mozilla.org/show_bug.cgi?id=1891319
	https://www.mozilla.org/security/advisories/mfsa2024-25/
	https://www.mozilla.org/security/advisories/mfsa2024-26/
	https://lists.debian.org/debian-lts-announce/2024/06/msg00000.html
	https://www.mozilla.org/security/advisories/mfsa2024-28/
security@mozilla.org	https://lists.debian.org/debian-lts-announce/2024/06/msg00010.html

Type

URI

https://bugzilla.mozilla.org/show_bug.cgi?id=1891319

https://www.mozilla.org/security/advisories/mfsa2024-25/

https://www.mozilla.org/security/advisories/mfsa2024-26/

https://lists.debian.org/debian-lts-announce/2024/06/msg00000.html

https://www.mozilla.org/security/advisories/mfsa2024-28/

security@mozilla.org

https://lists.debian.org/debian-lts-announce/2024/06/msg00010.html

Match rules