DirectorySecurity Advisories
Sign In
Security Advisories

CVE-2024-9397

Published

Last updated

NVD

https://nvd.nist.gov/vuln/detail/CVE-2024-9397

CGA ID

CGA-4hh3-vp98-9q43

Severity

6.1

Medium

CVSS V3

Description

A missing delay in directory upload UI could have made it possible for an attacker to trick a user into granting permission via clickjacking. This vulnerability affects Firefox < 131, Firefox ESR < 128.3, Thunderbird < 128.3, and Thunderbird < 131.

References

Affected packages


Safe Source for Open Sourceâ„¢
Media KitContact Us
© 2024 Chainguard. All Rights Reserved.
Private PolicyTerms of Use

Product

Chainguard Images