A website was able to detect when a user took a screenshot of a page using the built-in Screenshot functionality in Firefox. This vulnerability affects Firefox < 127.
The product behaves differently or sends different responses under different circumstances in a way that is observable to an unauthorized actor, which exposes security-relevant information about the state of the product, such as whether a particular operation was successful or not.
Link | Tags |
---|---|
https://bugzilla.mozilla.org/show_bug.cgi?id=1414937 | issue tracking permissions required |
https://www.mozilla.org/security/advisories/mfsa2024-25/ | vendor advisory |