Beveiligingsadvies

CVE-2024-4768

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2024-05-14 17:21:24
Laatst bijgewerkt 2025-02-13 17:53:39
Toegewezen door mozilla
CVSS-score 6.1
Status PUBLISHED

Beschrijving

A bug in popup notifications' interaction with WebAuthn made it easier for an attacker to trick a user into granting permissions. This vulnerability affects Firefox < 126, Firefox ESR < 115.11, and Thunderbird < 115.11.