CVE-2023-6867

Name of the Vulnerable Software and Affected Versions Firefox ESR versions prior to 115.6 Firefox versions prior to 121

Description The issue is related to the timing of a button click causing a popup to disappear, which is approximately the same length as the anti-clickjacking delay on permission prompts. This allows an attacker to lure users into clicking where the permission grant button would be about to appear, effectively conducting a clickjacking attack. The vulnerability is associated with errors in the representation of information in the user interface.

Recommendations For Firefox ESR versions prior to 115.6, update to version 115.6 or later. For Firefox versions prior to 121, update to version 121 or later. As a temporary workaround, consider restricting access to permission prompts to minimize the risk of exploitation.