Lucene search

[email protected]NVD:CVE-2023-5723

HistoryOct 25, 2023 - 6:17 p.m.

CVE-2023-5723

2023-10-2518:17:44

[email protected]

web.nvd.nist.gov

attacker

invalid characters

document.cookie

errors

firefox < 119

CVSS3

5.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

AI Score

6.3

Confidence

Low

EPSS

0.001

Percentile

24.2%

JSON

An attacker with temporary script access to a site could have set a cookie containing invalid characters using document.cookie that could have led to unknown errors. This vulnerability affects Firefox < 119.

Affected configurations

Nvd

Node

mozillafirefoxRange<119.0

VendorProductVersionCPE
mozillafirefox*cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
mozilla	firefox	*	cpe:2.3:a:mozilla:firefox::::::::

References

bugzilla.mozilla.org/show_bug.cgi?id=1802057

security.gentoo.org/glsa/202401-10

www.mozilla.org/security/advisories/mfsa2023-45/

CVSS3

5.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

AI Score

6.3

Confidence

Low

EPSS

0.001

Percentile

24.2%

JSON

Related for NVD:CVE-2023-5723

cvelist1 alpinelinux1 debiancve1 cve1 ubuntucve1 veracode1 prion1 openvas7 nessus10 ubuntu2 osv3 kaspersky1 mozilla1 gentoo1