Lucene search

K
alpinelinuxAlpine Linux Development TeamALPINE:CVE-2024-1549
HistoryFeb 20, 2024 - 2:15 p.m.

CVE-2024-1549

2024-02-2014:15:08
Alpine Linux Development Team
security.alpinelinux.org
8
website cursor
firefox
thunderbird
permission dialog
user confusion
unexpected permissions
vulnerability
unix

7.7 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

10.4%

If a website set a large custom cursor, portions of the cursor could have overlapped with the permission dialog, potentially resulting in user confusion and unexpected granted permissions. This vulnerability affects Firefox < 123, Firefox ESR < 115.8, and Thunderbird < 115.8.

OSVersionArchitecturePackageVersionFilename
Alpine3.18-communitynoarchfirefox-esr< 115.8.0-r0UNKNOWN
Alpine3.19-communitynoarchfirefox-esr< 115.8.0-r0UNKNOWN