Mozilla Firefox and Firefox ESR Cross-Origin Resource Status Leak Vulnerability

A vulnerability exists in Firefox versions prior to 139 and Firefox ESR versions prior to 128.11, where script elements loading cross-origin resources could generate load and error events that leaked information. This leakage could be exploited to perform XS-Leaks attacks.

Impact

Exploitation of this vulnerability could lead to cross-site leakage attacks, allowing an attacker to gather information about the user's interactions with other sites.

Remediation

Users can upgrade to Firefox 139 or Firefox ESR 128.11 to address this vulnerability.