Lucene search

K
cvelistMozillaCVELIST:CVE-2023-37204
HistoryJul 05, 2023 - 9:01 a.m.

CVE-2023-37204

2023-07-0509:01:40
mozilla
www.cve.org
website
fullscreen
notification
obscuring
vulnerability
firefox

6.9 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

32.6%

A website could have obscured the fullscreen notification by using an option element by introducing lag via an expensive computational function. This could have led to user confusion and possible spoofing attacks. This vulnerability affects Firefox < 115.

CNA Affected

[
  {
    "product": "Firefox",
    "vendor": "Mozilla",
    "versions": [
      {
        "lessThan": "115",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  }
]

6.9 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

32.6%