CVE-2023-25731

2023-06-0200:00:00

mozilla

www.cve.org

url previews

network panel

developer tools

query parameters

global objects

privileged code

firefox

vulnerability

AI Score

8.7

Confidence

High

EPSS

0.002

Percentile

60.9%

JSON

Due to URL previews in the network panel of developer tools improperly storing URLs, query parameters could potentially be used to overwrite global objects in privileged code. This vulnerability affects Firefox < 110.

CNA Affected

[
  {
    "vendor": "Mozilla",
    "product": "Firefox",
    "versions": [
      {
        "version": "unspecified",
        "lessThan": "110",
        "status": "affected",
        "versionType": "custom"
      }
    ]
  }
]