CVE-2023-23597

🗓️ 02 Jun 2023 00:00:00Reported by mozillaType

A compromised web child process could disable web security opening restrictions, leading to a new child process being spawned within the <code>file://</code> context. Given a reliable exploit primitive, this new process could be exploited again leading to arbitrary file read

Reporter	Title	Published	Views	Family All 41
AstraLinux	Astra Linux - уязвимость в firefox	20 May 202605:53	–	astralinux
Circl	CVE-2023-23597	2 Jun 202320:42	–	circl
CNNVD	Mozilla Firefox 加密问题漏洞	23 Jan 202300:00	–	cnnvd
CNVD	Mozilla Firefox is an open source web browser from the Mozilla Foundation in the United States. A code execution vulnerability exists in Mozilla Firefox, which can be exploited by an attacker to execute arbitrary code on a system or cause a denial of service.	12 Jun 202300:00	–	cnvd
Cvelist	CVE-2023-23597 Logic bug in process allocation allowed to read arbitrary files	2 Jun 202300:00	–	cvelist
Debian CVE	CVE-2023-23597	2 Jun 202300:00	–	debiancve
EUVD	EUVD-2023-27697	3 Oct 202520:07	–	euvd
Tenable Nessus	GLSA-202305-06 : Mozilla Firefox: Multiple Vulnerabilities	3 May 202300:00	–	nessus
Tenable Nessus	Mozilla Firefox < 109.0	17 Jan 202300:00	–	nessus
Tenable Nessus	Mozilla Firefox < 109.0	17 Jan 202300:00	–	nessus

NVD

Vulners

Node

mozilla firefoxRange<109.0

[
  {
    "product": "Firefox",
    "vendor": "Mozilla",
    "versions": [
      {
        "lessThan": "109",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
mozilla	www.mozilla.org/security/advisories/mfsa2023-01/
bugzilla	www.bugzilla.mozilla.org/show_bug.cgi

18 Dec 2025 16:15Current

6.7Medium risk

Vulners AI Score6.7

CVSS 3.16.5

EPSS0.00151

SSVC

CWE-326