By checking the result of calls to `window.open` with specifically set protocol handlers, an attacker could determine if the application which implements that protocol handler is installed. This vulnerability affects Firefox < 131, Firefox ESR < 128.3, Thunderbird < 128.3, and Thunderbird < 131.
The product behaves differently or sends different responses under different circumstances in a way that is observable to an unauthorized actor, which exposes security-relevant information about the state of the product, such as whether a particular operation was successful or not.
| Link | Tags |
|---|---|
| https://bugzilla.mozilla.org/show_bug.cgi?id=1881037 | issue tracking permissions required |
| https://www.mozilla.org/security/advisories/mfsa2024-46/ | vendor advisory |
| https://www.mozilla.org/security/advisories/mfsa2024-47/ | vendor advisory |
| https://www.mozilla.org/security/advisories/mfsa2024-49/ | vendor advisory |
| https://www.mozilla.org/security/advisories/mfsa2024-50/ | vendor advisory |