Lucene search
Ubuntu.comUB:CVE-2023-25731HistoryFeb 15, 2023 - 12:00 a.m.
CVE-2023-25731
2023-02-1500:00:00
ubuntu.com
ubuntu.com
14
mozilla firefox
url previews
query parameters
global objects
security vulnerability
CVSS3
8.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
EPSS
0.002
Percentile
60.9%
Due to URL previews in the network panel of developer tools improperly
storing URLs, query parameters could potentially be used to overwrite
global objects in privileged code. This vulnerability affects Firefox <
110.
Notes
| Author | Note |
|---|---|
| tyhicks | mozjs contains a copy of the SpiderMonkey JavaScript engine |
| mdeslaur | starting with Ubuntu 22.04, the firefox package is just a script that installs the Firefox snap |
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| ubuntu | 18.04 | noarch | firefox | < 110.0+build3-0ubuntu0.18.04.1 | UNKNOWN |
| ubuntu | 20.04 | noarch | firefox | < 110.0+build3-0ubuntu0.20.04.1 | UNKNOWN |
| ubuntu | 18.04 | noarch | mozjs38 | < any | UNKNOWN |
| ubuntu | 18.04 | noarch | mozjs52 | < any | UNKNOWN |
| ubuntu | 20.04 | noarch | mozjs52 | < any | UNKNOWN |
| ubuntu | 20.04 | noarch | mozjs68 | < any | UNKNOWN |
| ubuntu | 22.04 | noarch | mozjs78 | < any | UNKNOWN |
| ubuntu | 22.04 | noarch | mozjs91 | < any | UNKNOWN |
Related
debiancve
debiancve
CVE-2023-25731
2023-06-02 17:15:11
cve
cve
CVE-2023-25731
2023-06-02 17:15:11
cnvd
cnvd
Arbitrary Code Execution Vulnerability in Various Apple Products
2023-02-23 00:00:00
prion
prion
Code injection
2023-06-02 17:15:00
redhatcve
redhatcve
CVE-2023-25731
2023-02-16 09:29:58
veracode
veracode
Prototype Pollution
2023-02-25 20:48:03
nvd
nvd
CVE-2023-25731
2023-06-02 17:15:11
cvelist
cvelist
CVE-2023-25731
2023-06-02 00:00:00
amazon
amazon
Important: thunderbird
2023-03-02 22:36:00
Important: thunderbird
2023-03-02 22:36:00
nessus
nessus
Amazon Linux 2 : firefox (ALASFIREFOX-2023-007)
2023-09-27 00:00:00
Ubuntu 18.04 LTS / 20.04 LTS : Firefox vulnerabilities (USN-5880-1)
2023-02-20 00:00:00
Amazon Linux 2 : thunderbird (ALAS-2023-1983)
2023-03-07 00:00:00
ubuntu
ubuntu
Firefox regressions
2023-03-01 00:00:00
Firefox vulnerabilities
2023-02-20 00:00:00
openvas
openvas
Ubuntu: Security Advisory (USN-5880-2)
2023-03-02 00:00:00
Mozilla Firefox Security Advisories (MFSA2023-04, MFSA2023-06) - Windows
2023-03-03 00:00:00
Ubuntu: Security Advisory (USN-5880-1)
2023-02-20 00:00:00
osv
osv
firefox vulnerabilities
2023-02-20 03:14:08
firefox regressions
2023-03-01 07:00:04
MozillaFirefox-110.0.1-1.1 on GA media
2024-06-15 00:00:00
kaspersky
kaspersky
KLA20237 Multiple vulnerabilities in Mozilla Firefox
2023-02-14 00:00:00
mozilla
mozilla
Security Vulnerabilities fixed in Firefox 110 — Mozilla
2023-02-14 00:00:00
gentoo
gentoo
Mozilla Firefox: Multiple Vulnerabilities
2023-05-30 00:00:00
photon
photon
Critical Photon OS Security Update - PHSA-2023-5.0-0035
2023-06-22 00:00:00
CVSS3
8.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
EPSS
0.002
Percentile
60.9%
Related for UB:CVE-2023-25731