Lucene search

K
alpinelinuxAlpine Linux Development TeamALPINE:CVE-2023-32212
HistoryJun 02, 2023 - 5:15 p.m.

CVE-2023-32212

2023-06-0217:15:13
Alpine Linux Development Team
security.alpinelinux.org
9
vulnerability
firefox
thunderbird
address bar
obscurity
unix
cve-2023-32212

CVSS3

4.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

AI Score

6.2

Confidence

Low

EPSS

0.001

Percentile

45.5%

An attacker could have positioned a <code>datalist</code> element to obscure the address bar. This vulnerability affects Firefox < 113, Firefox ESR < 102.11, and Thunderbird < 102.11.

CVSS3

4.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

AI Score

6.2

Confidence

Low

EPSS

0.001

Percentile

45.5%