← Database

CVE-2024-5690

MEDIUM CVSS: 4.3 Published: 2024-06-11 Modified: 2026-06-17

Description

By monitoring the time certain operations take, an attacker could have guessed which external protocol handlers were functional on a user's system. This vulnerability affects Firefox < 127, Firefox ESR < 115.12, and Thunderbird < 115.12.

Affected Platforms

Mozilla FirefoxDebian Debian LinuxMozilla ThunderbirdMozilla Firefox Esr

Weakness Type

CWE-203, CWE-203

References