| Package | Affected versions | Patched versions |
|---|---|---|
| firefox | < 120.0 | 120.0 |
If an attacker needed a user to load an insecure http: page and knew that user had enabled HTTPS-only mode, the attacker could have tricked the user into clicking to grant an HTTPS-only exception if they could get the user to participate in a clicking game. This vulnerability affects Firefox < 120.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free