A vulnerability in Mozilla Firefox and Thunderbird allows attackers to bypass Cross-Origin Resource Sharing (CORS) protections through DNS rebinding, potentially leading to unauthorized data access.

This is a CORS implementation flaw where the browser caches preflight responses across IP address changes. An unauthenticated attacker can exploit this via DNS rebinding to bypass origin restrictions and interact with sensitive resources.

The ability to circumvent CORS policies poses a significant risk to user data confidentiality and integrity. By bypassing these security controls, a remote attacker could potentially perform unauthorized actions on behalf of the user or access sensitive data within the application context. With a CVSS score of 8.1, this flaw is considered high severity due to the potential for significant data compromise.

Immediate Action: Update Mozilla Firefox and Thunderbird to version 140.1, 141, or later versions as specified in the vendor security advisory.

Proactive Monitoring: Review browser security logs and network traffic for unusual patterns indicative of DNS rebinding attempts or unauthorized cross-origin requests.

Compensating Controls: While browser-level patches are the primary defense, deploying network-level controls such as robust DNS filtering or internal network segmentation can limit the impact of DNS rebinding attacks.

Public Exploit Available: Unknown

Organizations must prioritize the deployment of the provided patches for both Firefox and Thunderbird to prevent potential CORS bypass attacks. Given the high CVSS score and the nature of the vulnerability, prompt remediation is required to maintain the integrity of user sessions and prevent unauthorized cross-origin data exposure.