Firefox Vulnerability Allows Minimal Priviledged Extension to Modify Request Bodies

CVE-2024-7525

What is CVE-2024-7525?

A vulnerability exists in certain versions of Firefox and Thunderbird where a web extension could utilize minimal permissions to establish a StreamFilter. This could potentially allow unauthorized access to manipulate and read the response body of HTTP requests across any visited site. The affected versions include Firefox prior to version 129, as well as specific releases of Firefox ESR and Thunderbird. Organizations using these versions are advised to review security measures and consider updates to mitigate potential risks.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References