CVE-2024-6610

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2024-6610
Form validation popups could capture escape key presses. Therefore, spamming form validation messages could be used to prevent users from exiting full-screen mode. This vulnerability affects Firefox < 128 and Thunderbird < 128.

4.3 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 2.8 / Impact : 1.4

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction REQUIRED

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact LOW

Scope UNCHANGED

References
Link Resource
https://bugzilla.mozilla.org/show_bug.cgi?id=1883396 Issue Tracking Permissions Required
https://www.mozilla.org/security/advisories/mfsa2024-29/ Vendor Advisory
https://www.mozilla.org/security/advisories/mfsa2024-32/ Vendor Advisory
https://bugzilla.mozilla.org/show_bug.cgi?id=1883396 Issue Tracking Permissions Required
https://www.mozilla.org/security/advisories/mfsa2024-29/ Vendor Advisory
https://www.mozilla.org/security/advisories/mfsa2024-32/ Vendor Advisory
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*
cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*

Configuration 2 (hide)

cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*
History

18 Mar 2025, 21:15

Type Values Removed Values Added
CWE CWE-451

21 Nov 2024, 09:49

Type Values Removed Values Added
References () https://bugzilla.mozilla.org/show_bug.cgi?id=1883396 - Issue Tracking, Permissions Required () https://bugzilla.mozilla.org/show_bug.cgi?id=1883396 - Issue Tracking, Permissions Required
References () https://www.mozilla.org/security/advisories/mfsa2024-29/ - Vendor Advisory () https://www.mozilla.org/security/advisories/mfsa2024-29/ - Vendor Advisory
References () https://www.mozilla.org/security/advisories/mfsa2024-32/ - Vendor Advisory () https://www.mozilla.org/security/advisories/mfsa2024-32/ - Vendor Advisory

29 Aug 2024, 18:22

Type Values Removed Values Added
First Time Mozilla thunderbird
Mozilla
Mozilla firefox
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 4.3
CPE cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*
cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*
CWE NVD-CWE-noinfo
References () https://bugzilla.mozilla.org/show_bug.cgi?id=1883396 - () https://bugzilla.mozilla.org/show_bug.cgi?id=1883396 - Issue Tracking, Permissions Required
References () https://www.mozilla.org/security/advisories/mfsa2024-29/ - () https://www.mozilla.org/security/advisories/mfsa2024-29/ - Vendor Advisory
References () https://www.mozilla.org/security/advisories/mfsa2024-32/ - () https://www.mozilla.org/security/advisories/mfsa2024-32/ - Vendor Advisory

16 Jul 2024, 18:15

Type Values Removed Values Added
Summary
  • (es) Las ventanas emergentes de validación de formularios podrían capturar las pulsaciones de la tecla de escape. Por lo tanto, se podrían utilizar mensajes de validación de formularios de spam para evitar que los usuarios salgan del modo de pantalla completa. Esta vulnerabilidad afecta a Firefox &lt; 128.
Summary (en) Form validation popups could capture escape key presses. Therefore, spamming form validation messages could be used to prevent users from exiting full-screen mode. This vulnerability affects Firefox < 128. (en) Form validation popups could capture escape key presses. Therefore, spamming form validation messages could be used to prevent users from exiting full-screen mode. This vulnerability affects Firefox < 128 and Thunderbird < 128.
References
  • () https://www.mozilla.org/security/advisories/mfsa2024-32/ -

09 Jul 2024, 15:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-07-09 15:15

Updated : 2025-03-18 21:15

NVD link : CVE-2024-6610

Mitre link : CVE-2024-6610

CVE.ORG link : CVE-2024-6610

JSON object : View

Products Affected

mozilla

  • thunderbird
  • firefox
CWE
NVD-CWE-noinfo CWE-451

User Interface (UI) Misrepresentation of Critical Information