China National Vulnerability DatabaseCNVD-2023-06861Mozilla Firefox Input Validation Error Vulnerability (CNVD-2023-06861)
6.5 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Mozilla Firefox is an open source Web browser from the Mozilla Foundation in the U.S. An input validation error vulnerability exists in Mozilla Firefox, which stems from inadequate validation of URLs and can be exploited by attackers to trick victims into clicking on a very long link and hang the browser, resulting in a permanent denial of service.
| CPE | Name | Operator | Version |
|---|---|---|---|
| mozilla firefox | lt | 103.0 |
Related
6.5 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H