CVE-2023-25731

EPSS 0.23%
Published 02.06.2023 17:15:11
Last modified 10.01.2025 18:15:18
Source security@mozilla.org
Teams watchlist Login
Open Login

Due to URL previews in the network panel of developer tools improperly storing URLs, query parameters could potentially be used to overwrite global objects in privileged code. This vulnerability affects Firefox < 110.

Affected products Warnungen 0 Metrics 3 CWE 1 References 5

Data is provided by the National Vulnerability Database (NVD)

Mozilla ≫ Firefox Version < 110.0

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Type	Source	Score	Percentile
EPSS	FIRST.org	0.23%	0.456

CVSS Metriken
Source	Base Score	Exploit Score	Impact Score	Vector string
nvd@nist.gov	8.8	2.8	5.9	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
134c704f-9b21-4f2e-91b3-4a467353bcc0	8.8	2.8	5.9	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CWE-1284 Improper Validation of Specified Quantity in Input

The product receives input that is expected to specify a quantity (such as size or length), but it does not validate or incorrectly validates that the quantity has the required properties.

https://www.mozilla.org/security/advisories/mfsa2023-05/

Vendor Advisory

https://bugzilla.mozilla.org/show_bug.cgi?id=1801542

Issue Tracking

Permissions Required

https://nvd.nist.gov/vuln/detail/CVE-2023-25731

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2023-25731

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2023-25731

EUVD