First published: Tue Oct 29 2024(Updated: )
A clipboard "paste" button could persist across tabs which allowed a spoofing attack. This vulnerability affects Firefox < 132, Firefox ESR < 128.4, Thunderbird < 128.4, and Thunderbird < 132.
Affected Software | Affected Version | How to fix |
---|---|---|
Firefox | <132 | |
Firefox ESR | <128.4 | |
Thunderbird | <128.4<132 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
The severity of REDHAT-BUG-2322434 is classified as a moderate risk vulnerability due to the potential for spoofing attacks.
To fix REDHAT-BUG-2322434, update your version of Firefox or Thunderbird to the latest version beyond the affected versions.
REDHAT-BUG-2322434 affects Firefox versions less than 132, Firefox ESR versions less than 128.4, and Thunderbird versions less than 132.
REDHAT-BUG-2322434 allows for a spoofing attack due to the persistent clipboard paste button across tabs.
A temporary workaround for REDHAT-BUG-2322434 is to avoid using the clipboard functionality until the software is updated.