THREATINT

We use these services and cookies to improve your user experience. You may opt out if you wish, however, this may limit some features on this site.

Please see our statement on Data Privacy.

Fathom (Privacy friendly web analytics)
Zendesk (Helpdesk and Chat)

Ok

Home | EN
Support
CVE
PUBLISHED

CVE-2024-6612

Assignermozilla
Reserved2024-07-09
Published2024-07-09
Updated2024-07-17

Description

CSP violations generated links in the console tab of the developer tools, pointing to the violating resource. This caused a DNS prefetch which leaked that a CSP violation happened. This vulnerability affects Firefox < 128 and Thunderbird < 128.

Problem types

CSP violation leakage when using devtools

Product status

Any version before 128
affected

Any version before 128
affected

Credits

Aidan Stephenson & Yannik Marchand

References

https://bugzilla.mozilla.org/show_bug.cgi?id=1880374

https://www.mozilla.org/security/advisories/mfsa2024-29/

https://www.mozilla.org/security/advisories/mfsa2024-32/

cve.org CVE-2024-6612

nvd.nist.gov CVE-2024-6612

Download JSON

Share this page
https://cve.threatint.com/CVE/CVE-2024-6612
© Copyright 2024 THREATINT. Made in Cyprus with +