China National Vulnerability DatabaseCNVD-2023-17326Mozilla Firefox Security Feature Issue Vulnerability (CNVD-2023-17326)
6.1 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Mozilla Firefox is an open source Web browser from the Mozilla Foundation in the U.S. A security feature issue vulnerability exists in versions prior to Mozilla Firefox 100.0, which stems from Firefox for Android’s inability to properly log and retain HSTS settings. An attacker could exploit the vulnerability to perform a man-in-the-middle attack.
| CPE | Name | Operator | Version |
|---|---|---|---|
| mozilla firefox | lt | 100.0 |
Related
6.1 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N