VULNERABILITY INTELLIGENCE
CVE-2024-11701
CVSS score4.3 MEDIUM
EPSS probability0.39%
CISA KEVNot currently listed
Published2024-11-26
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
Description
The incorrect domain may have been displayed in the address bar during an interrupted navigation attempt. This could have led to user confusion and possible spoofing attacks. This vulnerability affects Firefox < 133 and Thunderbird < 133.
Weakness classification
- 134c704f-9b21-4f2e-91b3-4a467353bcc0: CWE-290
Primary references
- security@mozilla.org — Issue Tracking
- security@mozilla.org — Vendor Advisory
- security@mozilla.org — Vendor Advisory