Vulnerability Database

289,697

Total vulnerabilities in the database

CVE-2024-9398

By checking the result of calls to window.open with specifically set protocol handlers, an attacker could determine if the application which implements that protocol handler is installed. This vulnerability affects Firefox < 131, Firefox ESR < 128.3, Thunderbird < 128.3, and Thunderbird < 131.

  • Published: Oct 1, 2024
  • Updated: May 4, 2025
  • CVE: CVE-2024-9398
  • Severity: Medium
  • Exploit:

CVSS v3:

  • Severity: Medium
  • Score: 5.3
  • AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

No CWE or OWASP classifications available.

Software From Fixed in
mozilla / firefox - 131.0
mozilla / thunderbird - 128.3
mozilla / firefox_esr - 128.3.0
mozilla / thunderbird 129.0-beta2 129.0-beta2.x
mozilla / thunderbird 129.0-beta3 129.0-beta3.x
mozilla / thunderbird 129.0-beta4 129.0-beta4.x
mozilla / thunderbird 129.0-beta 129.0-beta.x
mozilla / thunderbird 129.0-beta5 129.0-beta5.x
mozilla / thunderbird 129.0-beta6 129.0-beta6.x