Lucene search

K
cvelistMozillaCVELIST:CVE-2021-24000
HistoryJun 24, 2021 - 1:20 p.m.

CVE-2021-24000

2021-06-2413:20:48
mozilla
raw.githubusercontent.com
3

5.4 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

35.6%

A race condition with requestPointerLock() and setTimeout() could have resulted in a user interacting with one tab when they believed they were on a separate tab. In conjunction with certain elements (such as <input type=“file”>) this could have led to an attack where a user was confused about the origin of the webpage and potentially disclosed information they did not intend to. This vulnerability affects Firefox < 88.

5.4 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

35.6%