Beveiligingsadvies

CVE-2024-2610

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2024-03-19 12:02:55
Laatst bijgewerkt 2025-02-13 17:41:01
Toegewezen door mozilla
CVSS-score 6.1
Status PUBLISHED

Beschrijving

Using a markup injection an attacker could have stolen nonce values. This could have been used to bypass strict content security policies. This vulnerability affects Firefox < 124, Firefox ESR < 115.9, and Thunderbird < 115.9.