Lucene search

K
prionPRIOn knowledge basePRION:CVE-2023-6868
HistoryDec 19, 2023 - 2:15 p.m.

Design/Logic Flaw

2023-12-1914:15:00
PRIOn knowledge base
www.prio-n.com
6
user-agent
push requests
vapid
unauthorized
empty messages
firefox
android
vulnerability

6.2 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

20.6%

In some instances, the user-agent would allow push requests which lacked a valid VAPID even though the push manager subscription defined one. This could allow empty messages to be sent from unauthorized parties.
This bug only affects Firefox on Android. This vulnerability affects Firefox < 121.

CPENameOperatorVersion
firefoxlt121.0

6.2 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

20.6%