Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2023-03059
HistoryJan 06, 2023 - 12:00 a.m.

Mozilla Firefox Input Validation Error Vulnerability (CNVD-2023-03059)

2023-01-0600:00:00
China National Vulnerability Database
www.cnvd.org.cn
18
mozilla firefox
input validation
vulnerability
elevation of privileges
arbitrary code
system crash
samesite attribute

0.001 Low

EPSS

Percentile

40.9%

Mozilla Firefox, an open source web browser from the Mozilla Foundation, is vulnerable to an input validation error that results from a request initiated in reader mode that does not properly omit cookies with the SameSite attribute. An attacker could use this vulnerability to elevate privileges to execute arbitrary code on the system or cause the browser to crash.