CVE-2024-7525
mozilla: Missing permission check when creating a StreamFilter
It was possible for a web extension with minimal permissions to create a `StreamFilter` which could be used to read and modify the response body of requests on any site. This vulnerability affects Firefox < 129, Firefox ESR < 115.14, Firefox ESR < 128.1, Thunderbird < 128.1, and Thunderbird < 115.14.
CVSS 3.1 · 9.1 Critical
EPSS < 1%
KEV · Not listed
Vendors
Products