Due to URL previews in the network panel of developer tools improperly storing URLs, query parameters could potentially be used to overwrite global objects in privileged code. This vulnerability affects Firefox < 110.
References
| Link | Resource |
|---|---|
| https://bugzilla.mozilla.org/show_bug.cgi?id=1801542 | Issue Tracking Permissions Required |
| https://www.mozilla.org/security/advisories/mfsa2023-05/ | Vendor Advisory |
| https://bugzilla.mozilla.org/show_bug.cgi?id=1801542 | Issue Tracking Permissions Required |
| https://www.mozilla.org/security/advisories/mfsa2023-05/ | Vendor Advisory |
| https://bugzilla.mozilla.org/show_bug.cgi?id=1801542 | Issue Tracking Permissions Required |
Configurations
History
10 Jan 2025, 18:15
| Type | Values Removed | Values Added |
|---|---|---|
| CWE | CWE-1284 | |
| References | () https://bugzilla.mozilla.org/show_bug.cgi?id=1801542 - Issue Tracking, Permissions Required |
21 Nov 2024, 07:50
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://bugzilla.mozilla.org/show_bug.cgi?id=1801542 - Issue Tracking, Permissions Required | |
| References | () https://www.mozilla.org/security/advisories/mfsa2023-05/ - Vendor Advisory |
08 Jun 2023, 15:47
| Type | Values Removed | Values Added |
|---|---|---|
| References | (MISC) https://bugzilla.mozilla.org/show_bug.cgi?id=1801542 - Issue Tracking, Permissions Required | |
| References | (MISC) https://www.mozilla.org/security/advisories/mfsa2023-05/ - Vendor Advisory | |
| CPE | cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:* | |
| CWE | NVD-CWE-noinfo | |
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 8.8 |
02 Jun 2023, 17:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2023-06-02 17:15
Updated : 2025-01-10 18:15
NVD link : CVE-2023-25731
Mitre link : CVE-2023-25731
CVE.ORG link : CVE-2023-25731
JSON object : View
Products Affected
mozilla
- firefox
CWE