Lucene search
HistoryJun 02, 2023 - 5:15 p.m.
CVE-2023-28160
firefox
vulnerability
sensitive information
web extension
url
local path
CVSS3
6.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
AI Score
5.8
Confidence
High
EPSS
0.002
Percentile
52.4%
When following a redirect to a publicly accessible web extension file, the URL may have been translated to the actual local path, leaking potentially sensitive information. This vulnerability affects Firefox < 111.
Affected configurations
Node
mozillafirefoxRange<111.0
Related
prion
prion
Design/Logic Flaw
2023-06-02 17:15:00
cvelist
cvelist
CVE-2023-28160
2023-06-02 00:00:00
veracode
veracode
Information Disclosure
2023-03-24 15:41:12
ubuntucve
ubuntucve
CVE-2023-28160
2023-03-15 00:00:00
debiancve
debiancve
CVE-2023-28160
2023-06-02 17:15:12
cve
cve
CVE-2023-28160
2023-06-02 17:15:12
ubuntu
ubuntu
Firefox vulnerabilities
2023-03-15 00:00:00
Firefox regressions
2023-03-27 00:00:00
openvas
openvas
Ubuntu: Security Advisory (USN-5954-2)
2023-03-28 00:00:00
Ubuntu: Security Advisory (USN-5954-1)
2023-03-16 00:00:00
Mozilla Firefox Security Advisories (MFSA2023-07, MFSA2023-11) - Windows
2023-05-11 00:00:00
osv
osv
firefox vulnerabilities
2023-03-15 11:30:03
firefox regressions
2023-03-27 03:05:28
nessus
nessus
Ubuntu 18.04 LTS / 20.04 LTS : Firefox vulnerabilities (USN-5954-1)
2023-03-15 00:00:00
SUSE SLES15 Security Update : MozillaFirefox (SUSE-SU-2023:0728-1)
2023-03-15 00:00:00
kaspersky
kaspersky
KLA48551 Multiple vulnerabilities in Mozilla Firefox
2023-03-14 00:00:00
mozilla
mozilla
Security Vulnerabilities fixed in Firefox 111 — Mozilla
2023-03-14 00:00:00
gentoo
gentoo
Mozilla Firefox: Multiple Vulnerabilities
2023-05-30 00:00:00
CVSS3
6.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
AI Score
5.8
Confidence
High
EPSS
0.002
Percentile
52.4%
Related for NVD:CVE-2023-28160