
Cloud Vulnerability DB
A community-led vulnerabilities database
A privacy vulnerability was discovered in Mozilla Firefox versions prior to 127 that allowed websites to detect when users took screenshots using the browser's built-in Screenshot functionality (Mozilla Advisory, NVD). The vulnerability was disclosed on June 11, 2024, and was assigned CVE-2024-5697.
The vulnerability has been assigned a CVSS v3.1 base score of 4.3 (Medium), with the vector string CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N. This indicates that the vulnerability requires network access and user interaction to exploit, with potential impact limited to low-level confidentiality breaches (NVD).
The vulnerability allows websites to detect when a user captures a screenshot of their page using Firefox's built-in Screenshot functionality, potentially compromising user privacy by enabling websites to track this specific user action (Mozilla Advisory).
The vulnerability requires user interaction and has been rated with low complexity to exploit. There are no public reports of this vulnerability being exploited in the wild (NVD).
The vulnerability has been fixed in Firefox version 127. Users are advised to update their Firefox browser to version 127 or later to mitigate this security issue (Mozilla Advisory).
Fix availability across major Linux distributions and their releases.
Source: This report was generated using AI
Free Vulnerability Assessment
Evaluate your cloud security practices across 9 security domains to benchmark your risk level and identify gaps in your defenses.
Get a personalized demo
"Best User Experience I have ever seen, provides full visibility to cloud workloads."
"Wiz provides a single pane of glass to see what is going on in our cloud environments."
"We know that if Wiz identifies something as critical, it actually is."