CVE-2023-32210

2023-06-1909:37:25

mozilla

www.cve.org

cve-2023-32210

documents ordering

privileged principal

firefox

7.4 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

35.5%

JSON

Documents were incorrectly assuming an ordering of principal objects when ensuring we were loading an appropriately privileged principal. In certain circumstances it might have been possible to cause a document to be loaded with a higher privileged principal than intended. This vulnerability affects Firefox < 113.

CNA Affected

[
  {
    "product": "Firefox",
    "vendor": "Mozilla",
    "versions": [
      {
        "lessThan": "113",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  }
]