Clickjacking Vulnerabilities in Mozilla Firefox and Thunderbird Products

CVE-2024-9397

What is CVE-2024-9397?

A security vulnerability has been identified in Mozilla's Firefox and Thunderbird applications, stemming from a missing delay in the directory upload user interface. This oversight could potentially be exploited by an attacker to launch clickjacking attacks, deceiving users into unknowingly granting permissions. The vulnerability poses a risk particularly for those using versions earlier than Firefox 131, Firefox ESR 128.3, Thunderbird 128.3, and Thunderbird 131. Users are advised to update to the latest versions to safeguard against these types of attacks. More information and potential mitigations can be found in Mozilla's security advisories.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References