When Firefox is configured to block storage of all cookies, it was still possible to store data in localstorage by using an iframe with a source of 'about:blank'. This could have led to malicious websites storing tracking data without permission. This vulnerability affects Firefox < 115.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade firefox-esrUpgrade firefox | Aug 22, 2024 | Jul 5, 2023 |
| Amazon Linux Ami 2 | — | Upgrade firefoxUpgrade firefox-debuginfo | Nov 17, 2023 | Jul 5, 2023 |
| Gentoo Linux | — | Upgrade www-client/firefox-bin.Upgrade www-client/firefox. | Jan 8, 2024 | Jul 5, 2023 |
| Mfsa2023 22 | — | Upgrade to the latest version of Mozilla FirefoxUpgrade to Mozilla Firefox version 115.0 | Jul 5, 2023 | Jul 4, 2023 |
| Suse | — | Upgrade MozillaFirefox-translations-commonUpgrade MozillaFirefox-develUpgrade MozillaFirefoxUpgrade mozillafirefox-branding-upstreamUpgrade MozillaFirefox-translations-otherUpgrade mozillafirefox-branding-sle | Jul 18, 2023 | Jul 5, 2023 |
| Ubuntu | — | Upgrade firefox | Jul 6, 2023 | Jul 5, 2023 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub