CVE-2024-5697: 
NixOS vulnerability analysis and mitigation

A privacy vulnerability was discovered in Mozilla Firefox versions prior to 127 that allowed websites to detect when users took screenshots using the browser's built-in Screenshot functionality (Mozilla Advisory, NVD). The vulnerability was disclosed on June 11, 2024, and was assigned CVE-2024-5697.

The vulnerability has been assigned a CVSS v3.1 base score of 4.3 (Medium), with the vector string CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N. This indicates that the vulnerability requires network access and user interaction to exploit, with potential impact limited to low-level confidentiality breaches (NVD).

The vulnerability allows websites to detect when a user captures a screenshot of their page using Firefox's built-in Screenshot functionality, potentially compromising user privacy by enabling websites to track this specific user action (Mozilla Advisory).

The vulnerability requires user interaction and has been rated with low complexity to exploit. There are no public reports of this vulnerability being exploited in the wild (NVD).

The vulnerability has been fixed in Firefox version 127. Users are advised to update their Firefox browser to version 127 or later to mitigate this security issue (Mozilla Advisory).