CVE-2023-25731

EPSS 0.23%
Veröffentlicht 02.06.2023 17:15:11
Zuletzt bearbeitet 10.01.2025 18:15:18
Quelle security@mozilla.org
Teams Watchlist Login
Unerledigt Login

Due to URL previews in the network panel of developer tools improperly storing URLs, query parameters could potentially be used to overwrite global objects in privileged code. This vulnerability affects Firefox < 110.

Betroffene Produkte Warnungen 0 Metriken 3 CWE 1 Referenzen 5

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Mozilla ≫ Firefox Version < 110.0

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.23%	0.456

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	8.8	2.8	5.9	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
134c704f-9b21-4f2e-91b3-4a467353bcc0	8.8	2.8	5.9	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CWE-1284 Improper Validation of Specified Quantity in Input

The product receives input that is expected to specify a quantity (such as size or length), but it does not validate or incorrectly validates that the quantity has the required properties.

https://www.mozilla.org/security/advisories/mfsa2023-05/

Vendor Advisory

https://bugzilla.mozilla.org/show_bug.cgi?id=1801542

Issue Tracking

Permissions Required

https://nvd.nist.gov/vuln/detail/CVE-2023-25731

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2023-25731

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2023-25731

EUVD