CVE-2023-29534

EPSS 0.44%
Published 19.06.2023 11:15:09
Last modified 11.12.2024 16:15:09
Source security@mozilla.org
Teams watchlist Login
Open Login

Different techniques existed to obscure the fullscreen notification in Firefox and Focus for Android.  These could have led to potential user confusion and spoofing attacks.

*This bug only affects Firefox and Focus for Android. Other versions of Firefox are unaffected.* This vulnerability affects Firefox for Android < 112 and Focus for Android < 112.

Affected products Warnungen 0 Metrics 3 CWE 0 References 11

Data is provided by the National Vulnerability Database (NVD)

Mozilla ≫ Firefox SwPlatformandroid Version < 112.0

Mozilla ≫ Firefox Focus SwPlatformandroid Version < 112.0

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Type	Source	Score	Percentile
EPSS	FIRST.org	0.44%	0.621

CVSS Metriken
Source	Base Score	Exploit Score	Impact Score	Vector string
nvd@nist.gov	9.1	3.9	5.2	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
134c704f-9b21-4f2e-91b3-4a467353bcc0	9.1	3.9	5.2	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N