PatchGap
Firefox · Toolkit

CVE-2024-10465

Logic Error in Toolkit
Low firefox Logic Error 🔧 Commit mapped

Overview

Low
Severity
—
CVSS
No
Exploited ITW
Fixed
Fix Status
Impactlow
DescriptionA clipboard "paste" button could persist across tabs which allowed a spoofing attack.
ComponentToolkit
Bug ClassLogic Error
Tracker1918853
Fix commit1814a92b7f83 (firefox) +1/-0
CISA KEVNot listed
CreditedKang Ali and Nur Fadhillah of Punggawa Cybersecurity
Disclosed2024-10-29

Files Changed

  • toolkit/modules/ClipboardContextMenu.sys.mjs

Patch

view commit
diff --git a/toolkit/modules/ClipboardContextMenu.sys.mjs b/toolkit/modules/ClipboardContextMenu.sys.mjs
index d68e89c2530..2175da37eb5 100644
--- a/toolkit/modules/ClipboardContextMenu.sys.mjs
+++ b/toolkit/modules/ClipboardContextMenu.sys.mjs
@@ -163,6 +163,7 @@ export var ClipboardContextMenu = {
 
     let menupopup = aChromeDoc.createXULElement("menupopup");
     menupopup.id = this.MENU_POPUP_ID;
+    menupopup.setAttribute("tabspecific", "true");
     menupopup.appendChild(menuitem);
     return menupopup;
   },
Loading diff…
On This Page