PT-2024-10064
CVE-2024-11701
·
Published
2024-11-25
·
Updated
2026-10-22
Description by
CVSS 2.0
5.0
MediumMetricsAV:N/AC:L/Au:N/C:N/I:P/A:N
Name of the Vulnerable Software and Affected Versions
Firefox versions prior to 133
Thunderbird versions prior to 133
Description
The vulnerability is related to the incorrect display of a domain in the address bar during an interrupted navigation attempt, potentially leading to user confusion and spoofing attacks. This issue may allow a remote attacker to conduct spoofing attacks due to inadequate authentication procedure and incorrect domain name display in the address bar.
Recommendations
For Firefox versions prior to 133, update to a version that includes the fix for this issue.
For Thunderbird versions prior to 133, update to a version that includes the fix for this issue.
As a temporary workaround, consider restricting access to sensitive information until the issue is resolved.
Found an issue in the description? Have something to add? Feel free to write us 👾