The incorrect domain may have been displayed in the address bar during an interrupted navigation attempt. This could have led to user confusion and possible spoofing attacks. This vulnerability affects Firefox < 133 and Thunderbird < 133.
References
| Link | Resource |
|---|---|
| https://bugzilla.mozilla.org/show_bug.cgi?id=1914797 | Issue Tracking |
| https://www.mozilla.org/security/advisories/mfsa2024-63/ | Vendor Advisory |
| https://www.mozilla.org/security/advisories/mfsa2024-67/ | Vendor Advisory |
Configurations
Configuration 1 (hide)
|
History
05 Apr 2025, 00:36
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:* cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:* |
|
| First Time |
Mozilla firefox
Mozilla thunderbird Mozilla |
|
| References | () https://bugzilla.mozilla.org/show_bug.cgi?id=1914797 - Issue Tracking | |
| References | () https://www.mozilla.org/security/advisories/mfsa2024-63/ - Vendor Advisory | |
| References | () https://www.mozilla.org/security/advisories/mfsa2024-67/ - Vendor Advisory |
27 Nov 2024, 16:15
| Type | Values Removed | Values Added |
|---|---|---|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 4.3 |
| CWE | CWE-290 |
26 Nov 2024, 14:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2024-11-26 14:15
Updated : 2025-04-05 00:36
NVD link : CVE-2024-11701
Mitre link : CVE-2024-11701
CVE.ORG link : CVE-2024-11701
JSON object : View
Products Affected
mozilla
- thunderbird
- firefox
CWE
CWE-290
Authentication Bypass by Spoofing