PatchGap
Firefox · Core

CVE-2024-8386

Spoofing in Core
Low CVSS 6.1 firefox Spoofing

Overview

Low
Severity
6.1
CVSS
No
Exploited ITW
Embargoed
Fix Status
Impactlow
DescriptionIf a site had been granted the permission to open popup windows, it could cause Select elements to appear on top of another site to perform a spoofing attack.
ComponentCore
Bug ClassSpoofing
Tracker1909529
CWECWE-601, CWE-290
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
CISA KEVNot listed
CreditedShaheen Fazim, Hafiizh
Disclosed2024-09-03

Fix not yet public

No public source fix for this bug has been identified on the main branch yet — it is embargoed or not yet disclosed. Root-cause analysis is withheld until the fix commit is available.
On This Page