Offscreen Canvas did not properly track cross-origin tainting, which could be used to access image data from another site in violation of same-origin policy. This vulnerability affects Firefox < 127, Firefox ESR < 115.12, and Thunderbird < 115.12.
References
Configurations
No configuration.
History
21 Nov 2024, 09:48
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://bugzilla.mozilla.org/show_bug.cgi?id=1891319 - | |
| References | () https://lists.debian.org/debian-lts-announce/2024/06/msg00000.html - | |
| References | () https://lists.debian.org/debian-lts-announce/2024/06/msg00010.html - | |
| References | () https://www.mozilla.org/security/advisories/mfsa2024-25/ - | |
| References | () https://www.mozilla.org/security/advisories/mfsa2024-26/ - | |
| References | () https://www.mozilla.org/security/advisories/mfsa2024-28/ - |
03 Jul 2024, 02:09
| Type | Values Removed | Values Added |
|---|---|---|
| CWE | CWE-829 | |
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 6.1 |
19 Jun 2024, 10:15
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
13 Jun 2024, 23:15
| Type | Values Removed | Values Added |
|---|---|---|
| Summary | (en) Offscreen Canvas did not properly track cross-origin tainting, which could be used to access image data from another site in violation of same-origin policy. This vulnerability affects Firefox < 127, Firefox ESR < 115.12, and Thunderbird < 115.12. | |
| References |
|
13 Jun 2024, 12:15
| Type | Values Removed | Values Added |
|---|---|---|
| Summary |
|
|
| References |
|
11 Jun 2024, 13:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2024-06-11 13:15
Updated : 2024-11-21 09:48
NVD link : CVE-2024-5693
Mitre link : CVE-2024-5693
CVE.ORG link : CVE-2024-5693
JSON object : View
Products Affected
No product.
CWE
CWE-829
Inclusion of Functionality from Untrusted Control Sphere