4.3

CVE-2023-32205

EPSS 0.14%
Veröffentlicht 02.06.2023 17:15:13
Zuletzt bearbeitet 21.11.2024 08:02:53
Quelle security@mozilla.org
CVE-Watchlists
Login
Unerledigt
Login

In multiple cases browser prompts could have been obscured by popups controlled by content. These could have led to potential user confusion and spoofing attacks. This vulnerability affects Firefox < 113, Firefox ESR < 102.11, and Thunderbird < 102.11.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 0 Referenzen 10

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Mozilla ≫ Firefox Version < 113.0

Mozilla ≫ Firefox ESR Version < 102.11

Mozilla ≫ Thunderbird Version < 102.11

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.14%	0.351

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	4.3	2.8	1.4	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

https://bugzilla.mozilla.org/show_bug.cgi?id=1753339

Vendor Advisory

Issue Tracking

Permissions Required

https://bugzilla.mozilla.org/show_bug.cgi?id=1753341

Vendor Advisory

Issue Tracking

https://security.gentoo.org/glsa/202312-03

https://security.gentoo.org/glsa/202401-10

https://www.mozilla.org/security/advisories/mfsa2023-16/

Vendor Advisory

https://www.mozilla.org/security/advisories/mfsa2023-17/

Vendor Advisory

https://www.mozilla.org/security/advisories/mfsa2023-18/

Vendor Advisory

https://nvd.nist.gov/vuln/detail/CVE-2023-32205

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2023-32205

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2023-32205

EUVD