CVE-2023-49061

2023-11-2115:15:07

CWE-601

[email protected]

web.nvd.nist.gov

cve-2023-49061

html template injection

reader mode

exfiltration

firefox for ios

vulnerability

nvd

6.1 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

6 Medium

AI Score

Confidence

High

0.0005 Low

EPSS

Percentile

16.8%

JSON

An attacker could have performed HTML template injection via Reader Mode and exfiltrated user information. This vulnerability affects Firefox for iOS < 120.

Affected configurations

Vulners

NVD

Node

mozillafirefoxRange≤120

VendorProductVersionCPE
mozillafirefox*cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
mozilla	firefox	*	cpe:2.3:a:mozilla:firefox::::::::

CNA Affected

[
  {
    "product": "Firefox for iOS",
    "vendor": "Mozilla",
    "versions": [
      {
        "lessThan": "120",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  }
]