Security Advisory

CVE-2024-5693

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2024-06-11 12:40:13

Last updated 2024-08-01 21:18:06

Assigner mozilla

CVSS score 6.1

State PUBLISHED

Description

Offscreen Canvas did not properly track cross-origin tainting, which could be used to access image data from another site in violation of same-origin policy. This vulnerability affects Firefox < 127, Firefox ESR < 115.12, and Thunderbird < 115.12.

← Browse all CVEs View on cve.org ↗