4.3

CVE-2023-32205

EPSS 0.14%
Published 02.06.2023 17:15:13
Last modified 21.11.2024 08:02:53
Source security@mozilla.org
Teams watchlist Login
Open Login

In multiple cases browser prompts could have been obscured by popups controlled by content. These could have led to potential user confusion and spoofing attacks. This vulnerability affects Firefox < 113, Firefox ESR < 102.11, and Thunderbird < 102.11.

Affected products Warnungen 0 Metrics 2 CWE 0 References 10

Data is provided by the National Vulnerability Database (NVD)

Mozilla ≫ Firefox Version < 113.0

Mozilla ≫ Firefox ESR Version < 102.11

Mozilla ≫ Thunderbird Version < 102.11

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Type	Source	Score	Percentile
EPSS	FIRST.org	0.14%	0.351

CVSS Metriken
Source	Base Score	Exploit Score	Impact Score	Vector string
nvd@nist.gov	4.3	2.8	1.4	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

https://bugzilla.mozilla.org/show_bug.cgi?id=1753339

Vendor Advisory

Issue Tracking

Permissions Required

https://bugzilla.mozilla.org/show_bug.cgi?id=1753341

Vendor Advisory

Issue Tracking

https://security.gentoo.org/glsa/202312-03

https://security.gentoo.org/glsa/202401-10

https://www.mozilla.org/security/advisories/mfsa2023-16/

Vendor Advisory

https://www.mozilla.org/security/advisories/mfsa2023-17/

Vendor Advisory

https://www.mozilla.org/security/advisories/mfsa2023-18/

Vendor Advisory

https://nvd.nist.gov/vuln/detail/CVE-2023-32205

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2023-32205

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2023-32205

EUVD