AUGUST 4, 2026
Live Feed
Back to database
Case File

CVE-2024-5687

MEDIUM · CVSS 5.3 EPSS 0.41%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2024-06-11 · Last synced 2026-08-04

CyberRota Analysis

This is a medium severity vulnerability with a CVSS score of 5.3. It affects Android, Firefox. It may be remotely exploitable.

CVE
CVE-2024-5687
Severity
MEDIUM
CVSS
5.3
EPSS
0.41%
Android Firefox

Original NVD Description

If a specific sequence of actions is performed when opening a new tab, the triggering principal associated with the new tab may have been incorrect. The triggering principal is used to calculate many values, including the `Referer` and `Sec-*` headers, meaning there is the potential for incorrect security checks within the browser in addition to incorrect or misleading information sent to remote websites. *This bug only affects Firefox for Android. Other versions of Firefox are unaffected.* This vulnerability affects Firefox < 127.

Related CVEs

Other vulnerabilities affecting the same vendor(s)