Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

ubuntu логотип

CVE-2024-9391

Опубликовано: 01 окт. 2024
Источник: ubuntu
Приоритет: medium
CVSS3: 6.5

Описание

A user who enables full-screen mode on a specially crafted web page could potentially be prevented from exiting full screen mode. This may allow spoofing of other sites as the address bar is no longer visible. This bug only affects Firefox Focus for Android. Other versions of Firefox are unaffected. This vulnerability affects Firefox < 131.

РелизСтатусПримечание
devel

not-affected

code not present
esm-infra/focal

DNE

focal

not-affected

jammy

not-affected

code not present
noble

not-affected

code not present
oracular

not-affected

code not present
upstream

not-affected

debian: Only affects Firefox Focus for Android

Показывать по

РелизСтатусПримечание
devel

not-affected

code not present
esm-infra/focal

DNE

focal

not-affected

jammy

not-affected

noble

not-affected

code not present
oracular

not-affected

code not present
upstream

needs-triage

Показывать по

6.5 Medium

CVSS3

Связанные уязвимости

CVSS3: 7.1
redhat
около 1 года назад

A user who enables full-screen mode on a specially crafted web page could potentially be prevented from exiting full screen mode. This may allow spoofing of other sites as the address bar is no longer visible. *This bug only affects Firefox Focus for Android. Other versions of Firefox are unaffected.* This vulnerability affects Firefox < 131.

CVSS3: 6.5
nvd
около 1 года назад

A user who enables full-screen mode on a specially crafted web page could potentially be prevented from exiting full screen mode. This may allow spoofing of other sites as the address bar is no longer visible. *This bug only affects Firefox Focus for Android. Other versions of Firefox are unaffected.* This vulnerability affects Firefox < 131.

CVSS3: 6.5
debian
около 1 года назад

A user who enables full-screen mode on a specially crafted web page co ...

CVSS3: 6.5
github
около 1 года назад

A user who enables full-screen mode on a specially crafted web page could potentially be prevented from exiting full screen mode. This may allow spoofing of other sites as the address bar is no longer visible. *This bug only affects Firefox Focus for Android. Other versions of Firefox are unaffected.* This vulnerability affects Firefox < 131.

CVSS3: 5.4
fstec
около 1 года назад

Уязвимость полноэкранного режима (Full Screen Mode) браузера Mozilla Firefox Focus операционных систем Android, позволяющая нарушителю проводить спуфинг-атаки

6.5 Medium

CVSS3