CVE-2023-6865

2023-12-1913:38:47

mozilla

www.cve.org

encryptingoutputstream

vulnerable

uninitialized data

local disk

private browsing mode

firefox esr

firefox

cve-2023-6865

6.9 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

28.2%

JSON

EncryptingOutputStream was susceptible to exposing uninitialized data. This issue could only be abused in order to write data to a local disk which may have implications for private browsing mode. This vulnerability affects Firefox ESR < 115.6 and Firefox < 121.

CNA Affected

[
  {
    "product": "Firefox ESR",
    "vendor": "Mozilla",
    "versions": [
      {
        "lessThan": "115.6",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  },
  {
    "product": "Firefox",
    "vendor": "Mozilla",
    "versions": [
      {
        "lessThan": "121",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  }
]