CVE-2024-2609

The permission prompt input delay could expire while the window is not in focus

Medium · published March 19, 2024

CVSS v3.1
6.1
EPSS
1%
Percentile
48.2
In the wild
Unconfirmed
What it is

The permission prompt input delay could expire while the window is not in focus. This makes it vulnerable to clickjacking by malicious websites. This vulnerability affects Firefox < 124, Firefox ESR < 115.10, and Thunderbird < 115.10.

The record
Technical detail
CVSS v3.1
6.1 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00603 · 48.2th percentile
Published
2024-03-19T12:02Z
EPSS history
Timeline
  • 19 MAR 12:02Z
    The permission prompt input delay could expire while the window is not in focus
    cvelistv5