Security Advisory

CVE-2024-4768

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2024-05-14 17:21:24
Last updated 2025-02-13 17:53:39
Assigner mozilla
State PUBLISHED

Description

A bug in popup notifications interaction with WebAuthn made it easier for an attacker to trick a user into granting permissions. This vulnerability affects Firefox < 126, Firefox ESR < 115.11, and Thunderbird < 115.11.