Due to URL previews in the network panel of developer tools improperly storing URLs, query parameters could potentially be used to overwrite global objects in privileged code. This vulnerability affects Firefox < 110.
References
| Link | Resource |
|---|---|
| https://bugzilla.mozilla.org/show_bug.cgi?id=1801542 | Issue Tracking Permissions Required |
| https://bugzilla.mozilla.org/show_bug.cgi?id=1801542 | Issue Tracking Permissions Required |
| https://bugzilla.mozilla.org/show_bug.cgi?id=1801542 | Issue Tracking Permissions Required |
| https://www.mozilla.org/security/advisories/mfsa2023-05/ | Vendor Advisory |
| https://www.mozilla.org/security/advisories/mfsa2023-05/ | Vendor Advisory |
Configurations
History
10 Jan 2025, 18:15
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://bugzilla.mozilla.org/show_bug.cgi?id=1801542 - Issue Tracking, Permissions Required | |
| References | () https://www.mozilla.org/security/advisories/mfsa2023-05/ - Vendor Advisory |
08 Jun 2023, 15:47
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:* | |
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 8.8 |
| First Time |
Mozilla firefox
Mozilla |
|
| CWE | NVD-CWE-noinfo | |
| References | (MISC) https://www.mozilla.org/security/advisories/mfsa2023-05/ - Vendor Advisory | |
| References | (MISC) https://bugzilla.mozilla.org/show_bug.cgi?id=1801542 - Issue Tracking, Permissions Required |
02 Jun 2023, 17:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2023-06-02 17:15
Updated : 2025-01-10 18:15
NVD link : CVE-2023-25731
Mitre link : CVE-2023-25731
JSON object : View
Products Affected
mozilla
- firefox
CWE