PT-2024-10064

CVE-2024-11701

·

Published

2024-11-25

·

Updated

2026-10-22

Description by

CVSS 2.0
5.0
Medium
MetricsAV:N/AC:L/Au:N/C:N/I:P/A:N
Name of the Vulnerable Software and Affected Versions Firefox versions prior to 133 Thunderbird versions prior to 133
Description The vulnerability is related to the incorrect display of a domain in the address bar during an interrupted navigation attempt, potentially leading to user confusion and spoofing attacks. This issue may allow a remote attacker to conduct spoofing attacks due to inadequate authentication procedure and incorrect domain name display in the address bar.
Recommendations For Firefox versions prior to 133, update to a version that includes the fix for this issue. For Thunderbird versions prior to 133, update to a version that includes the fix for this issue. As a temporary workaround, consider restricting access to sensitive information until the issue is resolved.
Exploitability
Fix
Impacts
Researchers
Vendors
Affected products
Related identifiers
ALT-PU-2024-16375
ALT-PU-2025-11100
ALT-PU-2025-14599
ALT-PU-2025-2230
ALT-PU-2025-5137
ALT-PU-2025-7695
CLSA-2026-1785560172
OPENSUSE-SU-2024:14583-1
OPENSUSE-SU-2026:11373-1
USN-7134-1
Found an issue in the description? Have something to add? Feel free to write us 👾