A bug in popup notifications' interaction with WebAuthn made it easier for an attacker to trick a user into granting permissions. This vulnerability affects Firefox < 126, Firefox ESR < 115.11, and Thunderbird < 115.11.
History

Thu, 21 Nov 2024 16:15:00 +0000

Type Values Removed Values Added
Weaknesses CWE-281
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}


cve-icon MITRE

Status: PUBLISHED

Assigner: mozilla

Published: 2024-05-14T17:21:24.047Z

Updated: 2024-11-21T16:03:03.223Z

Reserved: 2024-05-10T17:37:04.311Z

Link: CVE-2024-4768

cve-icon Vulnrichment

Updated: 2024-08-01T20:47:41.692Z

cve-icon NVD

Status : Awaiting Analysis

Published: 2024-05-14T18:15:14.013

Modified: 2024-11-21T16:15:26.283

Link: CVE-2024-4768

cve-icon Redhat

Severity : Moderate

Publid Date: 2024-05-14T00:00:00Z

Links: CVE-2024-4768 - Bugzilla