PT-2024-10064
CVE-2024-11701
·
تاريخ النشر
2024-11-25
·
تاريخ التحديث
2026-10-22
الوصف من
CVSS 2.0
5.0
متوسطةالمقاييسAV:N/AC:L/Au:N/C:N/I:P/A:N
Name of the Vulnerable Software and Affected Versions
Firefox versions prior to 133
Thunderbird versions prior to 133
Description
The vulnerability is related to the incorrect display of a domain in the address bar during an interrupted navigation attempt, potentially leading to user confusion and spoofing attacks. This issue may allow a remote attacker to conduct spoofing attacks due to inadequate authentication procedure and incorrect domain name display in the address bar.
Recommendations
For Firefox versions prior to 133, update to a version that includes the fix for this issue.
For Thunderbird versions prior to 133, update to a version that includes the fix for this issue.
As a temporary workaround, consider restricting access to sensitive information until the issue is resolved.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾