If an attacker needed a user to load an insecure http: page and knew that user had enabled HTTPS-only mode, the attacker could have tricked the user into clicking to grant an HTTPS-only exception if they could get the user to participate in a clicking game. This vulnerability affects Firefox < 120.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Gentoo Linux | — | Upgrade www-client/firefox-bin.Upgrade www-client/firefox. | Jan 8, 2024 | Nov 21, 2023 |
| Mfsa2023 49 | — | Upgrade to Mozilla Firefox version 120.0Upgrade to the latest version of Mozilla Firefox | Nov 22, 2023 | Nov 21, 2023 |
| Ubuntu | — | Upgrade firefox | Nov 24, 2023 | Nov 21, 2023 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub