Skip to content
Sign in
5.3 Medium

CVE-2024-6612 CSP violations generated links in the console tab of the developer tools, pointing to the violating resource

Description

CSP violations generated links in the console tab of the developer tools, pointing to the violating resource. This caused a DNS prefetch which leaked that a CSP violation happened. This vulnerability affects Firefox < 128 and Thunderbird < 128.

Affected products and versions

Product Affected versions Fixed in
Firefox 128 earliest → < 128 128
Thunderbird 128 earliest → < 128 128

Other CVEs of Firefox

The 2221 CVEs of Firefox →
CVE-2026-120572 Incorrect boundary conditions in the Layout: Block and Inline component 8.8 High CVE-2026-118027 Frame poisoning in the Layout component 9.1 Critical CVE-2026-118026 Invalid pointer in the JavaScript: GC component 8.8 High CVE-2026-118025 Other issue in the SVG component 8.8 High
Track this CVE