CVE-2024-0753medium

CVE-2024-0753

13Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 6.5epss 0.7%

exploitation probability

0.7%top 48% of all CVEs

observed exploitation

nono source reports it

In specific HSTS configurations an attacker could have bypassed HSTS on a subdomain. This vulnerability affects Firefox < 122, Firefox ESR < 115.7, and Thunderbird < 115.7.

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

Affected products

Mozilla · Firefox Mozilla · Firefox ESR Mozilla · Thunderbird

References

https://bugzilla.mozilla.org/show_bug.cgi?id=1870262 https://lists.debian.org/debian-lts-announce/2024/01/msg00015.html https://lists.debian.org/debian-lts-announce/2024/01/msg00022.html https://www.mozilla.org/security/advisories/mfsa2024-01/https://www.mozilla.org/security/advisories/mfsa2024-02/https://www.mozilla.org/security/advisories/mfsa2024-04/https://www.youtube.com/watch?v=JjMb7Z8ak2k