description: By displaying a form validity message in the correct location at the same time as a permission prompt (such as for geolocation), the validity message could have obscured the prompt, resulting in the user potentially being tricked into granting the permission. This vulnerability affects Firefox < 94, Thunderbird < 91.3, and Firefox ESR < 91.3.
problem types: Permission Prompt could be overlaid, resulting in user confusion and potential spoofing
affected:
{
product: Firefox
vendor: Mozilla
versions:
lessThan: 94, status: affected, version: unspecified, versionType: custom
}
{
product: Thunderbird
vendor: Mozilla
versions:
lessThan: 91.3, status: affected, version: unspecified, versionType: custom
}
{
product: Firefox ESR
vendor: Mozilla
versions:
lessThan: 91.3, status: affected, version: unspecified, versionType: custom
}
