CVE-2024-0753: Medium severity thunderbird vulnerability
In specific HSTS configurations an attacker could have bypassed HSTS on a subdomain.
Affected Software
Event History
Parent advisories
This vulnerability appears in the following advisories.
Peer vulnerabilities
Found alongside the following vulnerabilities.
Frequently Asked Questions
What is the severity of CVE-2024-0753?
CVE-2024-0753 is considered a moderate severity vulnerability that allows an attacker to bypass HSTS on a subdomain.
How can I mitigate CVE-2024-0753?
To mitigate CVE-2024-0753, update affected software to version 115.7 or later for Mozilla Thunderbird, Firefox, and Firefox ESR.
Which software is affected by CVE-2024-0753?
CVE-2024-0753 affects Mozilla Thunderbird, Firefox, and Firefox ESR versions up to 115.7 and specific Debian packages.
What is HSTS and how does CVE-2024-0753 relate to it?
HTTP Strict Transport Security (HSTS) is a web security policy mechanism and CVE-2024-0753 could allow attackers to bypass this protection on subdomains.
Are there known exploits for CVE-2024-0753?
As of now, there are no public exploits specifically documented for CVE-2024-0753.