Bug 2270663 (CVE-2024-2610)

Summary: CVE-2024-2610 Mozilla: Improper handling of html and body tags enabled CSP nonce leakage
Product: [Other] Security Response Reporter: Mauro Matteo Cascella <mcascell>
Component: vulnerabilityAssignee: Product Security <prodsec-ir-bot>
Status: NEW --- QA Contact:
Severity: medium Docs Contact:
Priority: medium    
Version: unspecifiedCC: abobrov, erack, gotiwari, jhorak, mvyas, tpopela
Target Milestone: ---Keywords: Security
Target Release: ---   
Hardware: All   
OS: Linux   
Whiteboard:
Fixed In Version: firefox 115.9, thunderbird 115.9 Doc Type: ---
Doc Text:
The Mozilla Foundation Security Advisory describes this flaw as: Using a markup injection an attacker could have stolen nonce values. This could have been used to bypass strict content security policies.
Story Points: ---
Clone Of: Environment:
Last Closed: Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Bug Depends On:    
Bug Blocks: 2268120    

Description Mauro Matteo Cascella 2024-03-21 10:37:45 UTC
Using a markup injection an attacker could have stolen nonce values. This could have been used to bypass strict content security policies.

External Reference:
https://www.mozilla.org/en-US/security/advisories/mfsa2024-13/#CVE-2024-2610

Comment 27 errata-xmlrpc 2024-03-25 18:49:42 UTC
This issue has been addressed in the following products:

  Red Hat Enterprise Linux 9.2 Extended Update Support

Via RHSA-2024:1483 https://access.redhat.com/errata/RHSA-2024:1483

Comment 28 errata-xmlrpc 2024-03-25 19:25:39 UTC
This issue has been addressed in the following products:

  Red Hat Enterprise Linux 9

Via RHSA-2024:1485 https://access.redhat.com/errata/RHSA-2024:1485

Comment 29 errata-xmlrpc 2024-03-25 19:28:40 UTC
This issue has been addressed in the following products:

  Red Hat Enterprise Linux 8

Via RHSA-2024:1484 https://access.redhat.com/errata/RHSA-2024:1484

Comment 30 errata-xmlrpc 2024-03-25 19:32:36 UTC
This issue has been addressed in the following products:

  Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support
  Red Hat Enterprise Linux 8.4 Update Services for SAP Solutions
  Red Hat Enterprise Linux 8.4 Telecommunications Update Service

Via RHSA-2024:1491 https://access.redhat.com/errata/RHSA-2024:1491

Comment 31 errata-xmlrpc 2024-03-25 19:32:55 UTC
This issue has been addressed in the following products:

  Red Hat Enterprise Linux 8.2 Advanced Update Support
  Red Hat Enterprise Linux 8.2 Update Services for SAP Solutions
  Red Hat Enterprise Linux 8.2 Telecommunications Update Service

Via RHSA-2024:1490 https://access.redhat.com/errata/RHSA-2024:1490

Comment 32 errata-xmlrpc 2024-03-25 19:34:40 UTC
This issue has been addressed in the following products:

  Red Hat Enterprise Linux 8.8 Extended Update Support

Via RHSA-2024:1488 https://access.redhat.com/errata/RHSA-2024:1488

Comment 33 errata-xmlrpc 2024-03-25 19:34:55 UTC
This issue has been addressed in the following products:

  Red Hat Enterprise Linux 9.0 Extended Update Support

Via RHSA-2024:1487 https://access.redhat.com/errata/RHSA-2024:1487

Comment 34 errata-xmlrpc 2024-03-25 19:35:14 UTC
This issue has been addressed in the following products:

  Red Hat Enterprise Linux 8.6 Extended Update Support

Via RHSA-2024:1489 https://access.redhat.com/errata/RHSA-2024:1489

Comment 35 errata-xmlrpc 2024-03-25 20:05:02 UTC
This issue has been addressed in the following products:

  Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support
  Red Hat Enterprise Linux 8.4 Update Services for SAP Solutions
  Red Hat Enterprise Linux 8.4 Telecommunications Update Service

Via RHSA-2024:1499 https://access.redhat.com/errata/RHSA-2024:1499

Comment 36 errata-xmlrpc 2024-03-25 20:06:21 UTC
This issue has been addressed in the following products:

  Red Hat Enterprise Linux 9

Via RHSA-2024:1493 https://access.redhat.com/errata/RHSA-2024:1493

Comment 37 errata-xmlrpc 2024-03-25 20:06:45 UTC
This issue has been addressed in the following products:

  Red Hat Enterprise Linux 9.0 Extended Update Support

Via RHSA-2024:1495 https://access.redhat.com/errata/RHSA-2024:1495

Comment 38 errata-xmlrpc 2024-03-25 20:06:56 UTC
This issue has been addressed in the following products:

  Red Hat Enterprise Linux 7

Via RHSA-2024:1498 https://access.redhat.com/errata/RHSA-2024:1498

Comment 39 errata-xmlrpc 2024-03-25 20:07:09 UTC
This issue has been addressed in the following products:

  Red Hat Enterprise Linux 8

Via RHSA-2024:1494 https://access.redhat.com/errata/RHSA-2024:1494

Comment 40 errata-xmlrpc 2024-03-25 20:07:20 UTC
This issue has been addressed in the following products:

  Red Hat Enterprise Linux 9.2 Extended Update Support

Via RHSA-2024:1492 https://access.redhat.com/errata/RHSA-2024:1492

Comment 41 errata-xmlrpc 2024-03-25 20:11:02 UTC
This issue has been addressed in the following products:

  Red Hat Enterprise Linux 7

Via RHSA-2024:1486 https://access.redhat.com/errata/RHSA-2024:1486

Comment 42 errata-xmlrpc 2024-03-25 20:12:40 UTC
This issue has been addressed in the following products:

  Red Hat Enterprise Linux 8.8 Extended Update Support

Via RHSA-2024:1496 https://access.redhat.com/errata/RHSA-2024:1496

Comment 43 errata-xmlrpc 2024-03-25 20:12:54 UTC
This issue has been addressed in the following products:

  Red Hat Enterprise Linux 8.6 Extended Update Support

Via RHSA-2024:1497 https://access.redhat.com/errata/RHSA-2024:1497

Comment 44 errata-xmlrpc 2024-03-25 20:13:11 UTC
This issue has been addressed in the following products:

  Red Hat Enterprise Linux 8.2 Advanced Update Support
  Red Hat Enterprise Linux 8.2 Update Services for SAP Solutions
  Red Hat Enterprise Linux 8.2 Telecommunications Update Service

Via RHSA-2024:1500 https://access.redhat.com/errata/RHSA-2024:1500