CVE-2024-8900

Description

An attacker could write data to the user's clipboard, bypassing the user prompt, during a certain sequence of navigational events. This vulnerability affects Firefox < 129, Firefox ESR < 128.3, and Thunderbird < 128.3.

Reserved 2024-09-16 | Published 2024-09-17 | Updated 2024-10-30 | Assigner mozilla

Problem types

Clipboard write permission bypass

Product status

Any version before 129
affected

Any version before 128.3
affected

Any version before 128.3
affected

Credits

Om Apip

References

bugzilla.mozilla.org/show_bug.cgi?id=1872841

www.mozilla.org/security/advisories/mfsa2024-33/

www.mozilla.org/security/advisories/mfsa2024-47/

www.mozilla.org/security/advisories/mfsa2024-49/

cve.org (CVE-2024-8900)

nvd.nist.gov (CVE-2024-8900)

Download JSON