Due to URL previews in the network panel of developer tools improperly storing URLs, query parameters could potentially be used to overwrite global objects in privileged code. This vulnerability affects Firefox < 110.
References
| Link | Resource |
|---|---|
| https://bugzilla.mozilla.org/show_bug.cgi?id=1801542 | Issue Tracking Permissions Required |
| https://www.mozilla.org/security/advisories/mfsa2023-05/ | Vendor Advisory |
| https://bugzilla.mozilla.org/show_bug.cgi?id=1801542 | Issue Tracking Permissions Required |
| https://www.mozilla.org/security/advisories/mfsa2023-05/ | Vendor Advisory |
Configurations
History
21 Nov 2024, 07:50
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://bugzilla.mozilla.org/show_bug.cgi?id=1801542 - Issue Tracking, Permissions Required | |
| References | () https://www.mozilla.org/security/advisories/mfsa2023-05/ - Vendor Advisory |
08 Jun 2023, 15:47
| Type | Values Removed | Values Added |
|---|---|---|
| CWE | NVD-CWE-noinfo | |
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 8.8 |
| First Time |
Mozilla
Mozilla firefox |
|
| References | (MISC) https://www.mozilla.org/security/advisories/mfsa2023-05/ - Vendor Advisory | |
| References | (MISC) https://bugzilla.mozilla.org/show_bug.cgi?id=1801542 - Issue Tracking, Permissions Required | |
| CPE | cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:* |
02 Jun 2023, 17:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2023-06-02 17:15
Updated : 2024-11-21 07:50
NVD link : CVE-2023-25731
Mitre link : CVE-2023-25731
CVE.ORG link : CVE-2023-25731
JSON object : View
Products Affected
mozilla
- firefox
CWE