Lucene search
Alpine Linux Development TeamALPINE:CVE-2023-5721HistoryOct 25, 2023 - 6:17 p.m.
CVE-2023-5721
2023-10-2518:17:43
Alpine Linux Development Team
security.alpinelinux.org
6
browser prompts
dialogs
vulnerability
firefox
thunderbird
activation-delay
unix
CVSS3
4.3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
AI Score
6.5
Confidence
Low
EPSS
0.001
Percentile
30.7%
It was possible for certain browser prompts and dialogs to be activated or dismissed unintentionally by the user due to an insufficient activation-delay. This vulnerability affects Firefox < 119, Firefox ESR < 115.4, and Thunderbird < 115.4.1.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Alpine | edge-community | noarch | firefox-esr | < 115.4.0-r0 | UNKNOWN |
| Alpine | edge-community | noarch | firefox | < 119.0-r0 | UNKNOWN |
| Alpine | edge-community | noarch | thunderbird | < 115.4.1-r0 | UNKNOWN |
| Alpine | 3.18-community | noarch | firefox-esr | < 115.5.0-r0 | UNKNOWN |
| Alpine | 3.18-community | noarch | firefox | < 119.0-r0 | UNKNOWN |
| Alpine | 3.18-community | noarch | thunderbird | < 115.4.0-r0 | UNKNOWN |
| Alpine | 3.19-community | noarch | firefox-esr | < 115.4.0-r0 | UNKNOWN |
| Alpine | 3.19-community | noarch | firefox | < 119.0-r0 | UNKNOWN |
| Alpine | 3.19-community | noarch | thunderbird | < 115.4.1-r0 | UNKNOWN |
| Alpine | 3.20-community | noarch | firefox-esr | < 115.4.0-r0 | UNKNOWN |
Related
veracode
veracode
Insufficient Activation Delay
2023-10-27 21:05:24
cve
cve
CVE-2023-5721
2023-10-25 18:17:43
cvelist
cvelist
CVE-2023-5721
2023-10-24 12:47:08
debiancve
debiancve
CVE-2023-5721
2023-10-25 18:17:43
redhatcve
redhatcve
CVE-2023-5721
2023-10-24 18:28:26
nvd
nvd
CVE-2023-5721
2023-10-25 18:17:43
ubuntucve
ubuntucve
CVE-2023-5721
2023-10-25 00:00:00
prion
prion
Authorization
2023-10-25 18:17:00
vulnrichment
vulnrichment
CVE-2023-5721
2023-10-24 12:47:08
nessus
nessus
Debian DSA-5538-1 : thunderbird - security update
2023-10-28 00:00:00
Debian DLA-3632-1 : firefox-esr - LTS security update
2023-10-27 00:00:00
Debian DLA-3637-1 : thunderbird - LTS security update
2023-10-29 00:00:00
osv
osv
thunderbird vulnerabilities
2023-11-02 03:30:29
firefox-esr - security update
2023-10-25 00:00:00
thunderbird - security update
2023-10-27 00:00:00
openvas
openvas
Mageia: Security Advisory (MGASA-2023-0309)
2023-11-07 00:00:00
Ubuntu: Security Advisory (USN-6468-1)
2023-11-03 00:00:00
Mageia: Security Advisory (MGASA-2023-0308)
2023-11-07 00:00:00
redos
redos
ROS-20240924-01
2024-09-24 00:00:00
ubuntu
ubuntu
Thunderbird vulnerabilities
2023-11-02 00:00:00
Firefox regressions
2023-11-14 00:00:00
Firefox vulnerabilities
2023-10-30 00:00:00
mageia
mageia
Updated thunderbird packages fix security vulnerabilities
2023-11-07 02:08:32
Updated nss and firefox packages fix security vulnerabilities
2023-11-07 02:08:32
debian
debian
[SECURITY] [DSA 5538-1] thunderbird security update
2023-10-28 12:34:11
[SECURITY] [DLA 3637-1] thunderbird security update
2023-10-29 09:05:55
[SECURITY] [DSA 5535-1] firefox-esr security update
2023-10-25 19:14:08
amazon
amazon
Important: thunderbird
2023-11-09 19:19:00
redhat
redhat
(RHSA-2023:6197) Important: thunderbird security update
2023-10-30 16:40:38
(RHSA-2023:6186) Important: firefox security update
2023-10-30 16:29:47
(RHSA-2023:6198) Important: thunderbird security update
2023-10-30 16:41:10
almalinux
almalinux
Important: firefox security update
2023-10-30 00:00:00
Important: thunderbird security update
2023-10-30 00:00:00
Important: firefox security update
2023-10-30 00:00:00
rocky
rocky
firefox security update
2023-11-11 23:00:15
oraclelinux
oraclelinux
thunderbird security update
2023-10-31 00:00:00
firefox security update
2023-10-31 00:00:00
thunderbird security update
2023-10-31 00:00:00
slackware
slackware
[slackware-security] mozilla-firefox
2023-10-24 22:27:04
[slackware-security] mozilla-thunderbird
2023-10-26 20:00:50
kaspersky
kaspersky
KLA61569 Multiple vulnerabilities in Mozilla Firefox ESR
2023-10-24 00:00:00
KLA61570 Multiple vulnerabilities in Mozilla Thunderbird
2023-10-24 00:00:00
KLA61568 Multiple vulnerabilities in Mozilla Firefox
2023-10-24 00:00:00
mozilla
mozilla
Security Vulnerabilities fixed in Thunderbird 115.4.1 — Mozilla
2023-10-24 00:00:00
Security Vulnerabilities fixed in Firefox ESR 115.4 — Mozilla
2023-10-24 00:00:00
Security Vulnerabilities fixed in Firefox 119 — Mozilla
2023-10-24 00:00:00
gentoo
gentoo
Mozilla Thunderbird: Multiple Vulnerabilities
2024-02-19 00:00:00
ibm
ibm
CVSS3
4.3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
AI Score
6.5
Confidence
Low
EPSS
0.001
Percentile
30.7%
Related for ALPINE:CVE-2023-5721