{ "id": "CVE-2024-0753", "sourceIdentifier": "security@mozilla.org", "published": "2024-01-23T14:15:38.730", "lastModified": "2024-01-23T14:15:38.730", "vulnStatus": "Received", "descriptions": [ { "lang": "en", "value": "In specific HSTS configurations an attacker could have bypassed HSTS on a subdomain. This vulnerability affects Firefox < 122, Firefox ESR < 115.7, and Thunderbird < 115.7." } ], "metrics": {}, "references": [ { "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1870262", "source": "security@mozilla.org" }, { "url": "https://www.mozilla.org/security/advisories/mfsa2024-01/", "source": "security@mozilla.org" }, { "url": "https://www.mozilla.org/security/advisories/mfsa2024-02/", "source": "security@mozilla.org" }, { "url": "https://www.mozilla.org/security/advisories/mfsa2024-04/", "source": "security@mozilla.org" } ] }