First published: Tue Jul 09 2024(Updated: )
A nested iframe, triggering a cross-site navigation, could send SameSite=Strict or Lax cookies. This vulnerability affects Firefox < 128 and Thunderbird < 128.
Credit: security@mozilla.org security@mozilla.org
Affected Software | Affected Version | How to fix |
---|---|---|
Mozilla Thunderbird | <128 | 128 |
Mozilla Firefox | <128 | 128 |
ubuntu/firefox | <128.0+ | 128.0+ |
debian/firefox | 130.0-1 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
(Found alongside the following vulnerabilities)