Mozilla Firefox and Firefox ESR Same-Origin Policy Bypass Vulnerability in the DOM: Workers Component

A same-origin policy bypass vulnerability has been identified in the DOM: Workers component of Mozilla Firefox. This issue affects Firefox versions prior to 145 and Firefox ESR versions prior to 140.5. The vulnerability allows for unauthorized cross-origin interactions by bypassing the same-origin policy, which could lead to potential security risks such as data leakage or manipulation.

Impact

Exploitation of this vulnerability allows for a same-origin policy bypass, enabling cross-origin interactions that could lead to data leakage or manipulation.

Remediation

Users can upgrade to Firefox 145 or Firefox ESR 140.5 to address this vulnerability.