CVE-2024-9398

Publication date

2024-10-01 15:13:20

Family

mozilla

State

PUBLISHED

Description

By checking the result of calls to `window.open` with specifically set protocol handlers, an attacker could determine if the application which implements that protocol handler is installed. This vulnerability affects Firefox < 131, Firefox ESR < 128.3, Thunderbird < 128.3, and Thunderbird < 131.