CVE-2024-2610

2024-03-1912:15:08

Alpine Linux Development Team

security.alpinelinux.org

cve-2024-2610

nonce values

content security policies

firefox

thunderbird

vulnerability

markup injection

7.3 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

10.5%

JSON

Using a markup injection an attacker could have stolen nonce values. This could have been used to bypass strict content security policies. This vulnerability affects Firefox < 124, Firefox ESR < 115.9, and Thunderbird < 115.9.

OSVersionArchitecturePackageVersionFilename
Alpine3.18-communitynoarchfirefox-esr< 115.9.0-r0UNKNOWN
Alpine3.19-communitynoarchfirefox-esr< 115.9.0-r0UNKNOWN