Tracker / CVE-2024-5692
CVE-2024-5692
Medium 6.5
On Windows 10, when using the 'Save As' functionality, an attacker could have tricked the browser into saving the file with a disallowed extension such as `.url` by including an invalid character in the extension. *Note:* This issue only affected Windows operating systems. Other operating systems are unaffected. This vulnerability affects Firefox < 127, Firefox ESR < 115.12, and Thunderbird < 115.12.
Affected products and versions
| mozilla | firefox · … → 115.12 |
|---|---|
| mozilla | firefox · … → 127.0 |
| mozilla | thunderbird · … → 115.12 |
Analysis
This page is not indexable yet.Until it carries original analysis — what it actually exposes, how to check in two minutes whether a system was touched, what to do if it was — the page stays noindex. The database decides that, not the template.