Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

6 records

Release: Mozilla Firefox ESR, Thunderbird 102.7 Clear all filters
TI-2023-09434 CVE-2023-23605 · GHSA-w9xw-rq9v-758p

Memory safety bugs fixed in Firefox 109 and Firefox ESR 102.7

Priority MEDIUM 41

Mozilla developers and the Mozilla Fuzzing Team reported memory safety bugs present in Firefox 108 and Firefox ESR 102.6.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00702 Published 2023-06-02 Partial fix · 109, 102.7 CWE-787
TI-2023-09430 CVE-2023-23601 · GHSA-4982-x52g-9jjx

URL being dragged from cross-origin iframe into same tab triggers navigation

Priority LOW 29

Navigations were being allowed when dragging a URL from a cross-origin iframe into the same tab which could lead to website spoofing attacks This vulnerability affects Firefox < 109, Firefox ESR < 102.7, and Thunderbird…

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00347 Published 2023-06-02 Partial fix · 109, 102.7 CWE-346
TI-2023-09428 CVE-2023-23599 · GHSA-x86f-c5g7-4mrq

Malicious command could be hidden in devtools output on Windows

Priority LOW 30

When copying a network request from the developer tools panel as a curl command the output was not being properly sanitized and could allow arbitrary commands to be hidden within.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00601 Published 2023-06-02 Partial fix · 109, 102.7 CWE-116
TI-2023-09427 CVE-2023-23598 · GHSA-h2qp-p99q-hmrr

Arbitrary file read from GTK drag and drop on Linux

Priority LOW 30

Due to the Firefox GTK wrapper code's use of text/plain for drag data and GTK treating all text/plain MIMEs containing file URLs as being dragged a website could arbitrarily read a file via a call to `DataTransfer.setDat…

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00641 Published 2023-06-02 Partial fix · 109, 102.7