Vulnerability Description
The incorrect domain may have been displayed in the address bar during an interrupted navigation attempt. This could have led to user confusion and possible spoofing attacks. This vulnerability affects Firefox < 133 and Thunderbird < 133.
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Mozilla | Firefox | < 133.0 |
| Mozilla | Thunderbird | < 133.0 |
Related Weaknesses (CWE)
References
- https://bugzilla.mozilla.org/show_bug.cgi?id=1914797Issue Tracking
- https://www.mozilla.org/security/advisories/mfsa2024-63/Vendor Advisory
- https://www.mozilla.org/security/advisories/mfsa2024-67/Vendor Advisory
FAQ
What is CVE-2024-11701?
CVE-2024-11701 is a vulnerability with a CVSS score of 4.3 (MEDIUM). The incorrect domain may have been displayed in the address bar during an interrupted navigation attempt. This could have led to user confusion and possible spoofing attacks. This vulnerability affect...
How severe is CVE-2024-11701?
CVE-2024-11701 has been rated MEDIUM with a CVSS base score of 4.3/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2024-11701?
Check the references section above for vendor advisories and patch information. Affected products include: Mozilla Firefox, Mozilla Thunderbird.