Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2024-1547

Through a series of API calls and redirects, an attacker-controlled alert dialog could have been displayed on another website (with the victim website's URL shown). This vulnerability affects Firefox < 123, Firefox ESR < 115.8, and Thunderbird < 115.8.

Published

2024-02-20T14:15:08.547

Last Modified

2025-03-28T18:15:16.673

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 6.5 (MEDIUM)

Weaknesses
  • Type: Primary
    NVD-CWE-noinfo
  • Type: Secondary
    CWE-290
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application mozilla firefox < 115.8.0 Yes
Application mozilla firefox < 123.0 Yes
Application mozilla thunderbird < 115.8.0 Yes
Operating System debian debian_linux 10.0 Yes
References