Multiple CSP and Network Vulnerabilities Affect Firefox and Thunderbird Users

Two vulnerabilities have been identified affecting Firefox and Thunderbird. CVE-2024-6612 allows CSP violations to generate links in the console, leading to DNS prefetching and potential information leakage, impacting Firefox and Thunderbird versions below 128. CVE-2024-4773 permits prior content to remain visible during network errors, which could be exploited to spoof websites, affecting Firefox versions below 126.