CVE-2024-10462 is a vulnerability in Mozilla Firefox and Thunderbird where truncation of a long URL could allow origin spoofing in a permission prompt. This could mislead users about the true origin of a permission request. The issue affects Firefox versions prior to 132 and Firefox ESR prior to 128.4, as well as Thunderbird versions prior to 128.4 and 132. Mozilla has fixed this vulnerability in Firefox 132 and Firefox ESR 128.4.