Vulnerability Database

289,599

Total vulnerabilities in the database

CVE-2024-9397

A missing delay in directory upload UI could have made it possible for an attacker to trick a user into granting permission via clickjacking. This vulnerability affects Firefox < 131, Firefox ESR < 128.3, Thunderbird < 128.3, and Thunderbird < 131.

  • Published: Oct 1, 2024
  • Updated: May 4, 2025
  • CVE: CVE-2024-9397
  • Severity: Medium
  • Exploit:

CVSS v3:

  • Severity: Medium
  • Score: 6.1
  • AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

CWEs:

Software From Fixed in
mozilla / firefox - 131.0
mozilla / thunderbird - 128.3
mozilla / firefox_esr - 128.3.0
mozilla / thunderbird 129.0-beta2 129.0-beta2.x
mozilla / thunderbird 129.0-beta3 129.0-beta3.x
mozilla / thunderbird 129.0-beta4 129.0-beta4.x
mozilla / thunderbird 129.0-beta5 129.0-beta5.x
mozilla / thunderbird 129.0-beta6 129.0-beta6.x
mozilla / thunderbird 129.0-beta 129.0-beta.x