CVE-2023-6867

The timing of a button click causing a popup to disappear was approximately the same length as the anti-clickjacking delay on permission prompts

published December 19, 2023

CVSS
—
EPSS
1%
Percentile
52.0
In the wild
Unconfirmed
What it is

The timing of a button click causing a popup to disappear was approximately the same length as the anti-clickjacking delay on permission prompts. It was possible to use this fact to surprise users by luring them to click where the permission grant button would be about to appear. This vulnerability affects Firefox ESR < 115.6 and Firefox < 121.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00683 · 52.0th percentile
Published
2023-12-19T13:38Z
EPSS history
Timeline
  • 19 DEC 13:38Z
    The timing of a button click causing a popup to disappear was approximately the same length as the anti-clickjacking delay on permission prompts
    cvelistv5