Beveiligingsadvies

CVE-2024-4769

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2024-05-14 17:21:24
Laatst bijgewerkt 2025-02-13 17:53:40
Toegewezen door mozilla
CVSS-score 5.9
Status PUBLISHED

Beschrijving

When importing resources using Web Workers, error messages would distinguish the difference between `application/javascript` responses and non-script responses. This could have been abused to learn information cross-origin. This vulnerability affects Firefox < 126, Firefox ESR < 115.11, and Thunderbird < 115.11.