Security Advisory

CVE-2024-4768

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2024-05-14 17:21:24
Last updated 2025-02-13 17:53:39
Assigner mozilla
CVSS score not scored
State PUBLISHED

Description

A bug in popup notifications' interaction with WebAuthn made it easier for an attacker to trick a user into granting permissions. This vulnerability affects Firefox < 126, Firefox ESR < 115.11, and Thunderbird < 115.11.