Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2023-68479
HistoryJul 07, 2023 - 12:00 a.m.

Mozilla Firefox is an open source web browser from the Mozilla Foundation in the United States. A security bypass vulnerability exists in versions prior to Mozilla Firefox 110, which can be exploited by attackers to cause unexpected network requests from the operating system.

2023-07-0700:00:00
China National Vulnerability Database
www.cnvd.org.cn
11
mozilla firefox
open source
web browser
mozilla foundation
united states
security bypass
vulnerability
network requests
information disclosure
iframe
'about:blank'
tracking data
attacker
operating system
cnvd

0.001 Low

EPSS

Percentile

39.5%

Mozilla Firefox is an open source web browser from the Mozilla Foundation in the United States. Mozilla Firefox suffers from an information disclosure vulnerability that originates from the use of an iframe with an ‘about:blank’ source to store data in local memory, which can be exploited by an attacker to store tracking data without permission.