CVE-2024-6611
09.07.2024, 15:15
A nested iframe, triggering a cross-site navigation, could send SameSite=Strict or Lax cookies. This vulnerability affects Firefox < 128 and Thunderbird < 128.Enginsight
Vendor | Product | Version |
---|---|---|
mozilla | firefox | 𝑥 < 128.0 |
mozilla | thunderbird | 𝑥 < 128.0 |
𝑥
= Vulnerable software versions

Ubuntu Releases
Ubuntu Product | |||||||||||
---|---|---|---|---|---|---|---|---|---|---|---|
firefox |
| ||||||||||
mozjs102 |
| ||||||||||
mozjs38 |
| ||||||||||
mozjs52 |
| ||||||||||
mozjs68 |
| ||||||||||
mozjs78 |
| ||||||||||
mozjs91 |
| ||||||||||
thunderbird |
|
Common Weakness Enumeration
References