A website could have obscured the fullscreen notification by using a dropdown select input element. This could have led to user confusion and possible spoofing attacks. This vulnerability affects Firefox < 123, Firefox ESR < 115.8, and Thunderbird < 115.8.
2024-02-20T14:15:08.603
2025-03-27T14:36:57.067
Analyzed
CVSSv3.1: 4.3 (MEDIUM)
Type | Vendor | Product | Version/Range | Vulnerable? |
---|---|---|---|---|
Application | mozilla | firefox | < 115.8.0 | Yes |
Application | mozilla | firefox | < 123.0 | Yes |
Application | mozilla | thunderbird | < 115.8.0 | Yes |
Operating System | debian | debian_linux | 10.0 | Yes |