Lucene search

Debian Security Bug TrackerDEBIANCVE:CVE-2023-37206

HistoryJul 05, 2023 - 10:15 a.m.

CVE-2023-37206

2023-07-0510:15:09

Debian Security Bug Tracker

security-tracker.debian.org

firefox

symlinks

data exposure

vulnerability

unix

CVSS3

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

EPSS

0.001

Percentile

41.9%

JSON

Uploading files which contain symlinks may have allowed an attacker to trick a user into submitting sensitive data to a malicious website. This vulnerability affects Firefox < 115.

OSVersionArchitecturePackageVersionFilename
Debian999allfirefox< 115.0-1firefox_115.0-1_all.deb

OS	Version	Architecture	Package	Version	Filename
Debian	999	all	firefox	< 115.0-1	firefox_115.0-1_all.deb

CVSS3

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

EPSS

0.001

Percentile

41.9%

JSON

Related for DEBIANCVE:CVE-2023-37206