CVE-2024-6610

Form validation popups could block exiting full-screen mode

Medium · published July 9, 2024

CVSS v3.1
6.3
EPSS
0%
Percentile
26.5
In the wild
Unconfirmed
What it is

Form validation popups could capture escape key presses. Therefore, spamming form validation messages could be used to prevent users from exiting full-screen mode. This vulnerability affects Firefox < 128 and Thunderbird < 128.

The record
Technical detail
CVSS v3.1
6.3 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
CVSS v4.0
Not supplied
EPSS
0.00342 · 26.5th percentile
Published
2024-07-09T14:25Z
EPSS history
Timeline
  • 09 JUL 14:25Z
    Form validation popups could block exiting full-screen mode
    cvelistv5