| Package | Affected versions | Patched versions |
|---|---|---|
| firefox | < 131.0 | 131.0 |
| firefox esr | < 128.3.0 | 128.3.0 |
| thunderbird | = 129.0< 128.3 | 128.3 |
A missing delay in directory upload UI could have made it possible for an attacker to trick a user into granting permission via clickjacking. This vulnerability affects Firefox < 131, Firefox ESR < 128.3, Thunderbird < 128.3, and Thunderbird < 131.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free