CVE-2024-6607

{"id": "CVE-2024-6607", "cveTags": [], "metrics": {}, "published": "2024-07-09T15:15:12.790", "references": [{"url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1694513", "source": "security@mozilla.org"}, {"url": "https://www.mozilla.org/security/advisories/mfsa2024-29/", "source": "security@mozilla.org"}, {"url": "https://www.mozilla.org/security/advisories/mfsa2024-32/", "source": "security@mozilla.org"}], "vulnStatus": "Awaiting Analysis", "descriptions": [{"lang": "en", "value": "It was possible to prevent a user from exiting pointerlock when pressing escape and to overlay customValidity notifications from a `&lt;select&gt;` element over certain permission prompts. This could be used to confuse a user into giving a site unintended permissions. This vulnerability affects Firefox < 128 and Thunderbird < 128."}, {"lang": "es", "value": "Era posible evitar que un usuario saliera del bloqueo del puntero al presionar Escape y superponer notificaciones de customValidity desde un elemento `&lt;select&gt;` sobre ciertas solicitudes de permiso. Esto podr\u00eda usarse para confundir a un usuario y obligarlo a otorgar permisos no deseados a un sitio. Esta vulnerabilidad afecta a Firefox &lt; 128."}], "lastModified": "2024-07-16T18:15:09.327", "sourceIdentifier": "security@mozilla.org"}