← Database

CVE-2024-4772

MEDIUM CVSS: 5.9 Published: 2024-05-14 Modified: 2026-06-17

Description

An HTTP digest authentication nonce value was generated using `rand()` which could lead to predictable values. This vulnerability affects Firefox < 126.

Affected Platforms

Mozilla Firefox

Weakness Type

CWE-338

References