Lucene search
Debian Security Bug TrackerDEBIANCVE:CVE-2023-28160HistoryJun 02, 2023 - 5:15 p.m.
CVE-2023-28160
2023-06-0217:15:12
Debian Security Bug Tracker
security-tracker.debian.org
11
cve-2023-28160
web extension
sensitive information
firefox
unix
6.5 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
0.001 Low
EPSS
Percentile
50.9%
When following a redirect to a publicly accessible web extension file, the URL may have been translated to the actual local path, leaking potentially sensitive information. This vulnerability affects Firefox < 111.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Debian | 999 | all | firefox | < 111.0-1 | firefox_111.0-1_all.deb |
Related
nvd
nvd
CVE-2023-28160
2023-06-02 17:15:12
prion
prion
Design/Logic Flaw
2023-06-02 17:15:00
cvelist
cvelist
CVE-2023-28160
2023-06-02 00:00:00
veracode
veracode
Information Disclosure
2023-03-24 15:41:12
cve
cve
CVE-2023-28160
2023-06-02 17:15:12
ubuntucve
ubuntucve
CVE-2023-28160
2023-03-15 00:00:00
openvas
openvas
Ubuntu: Security Advisory (USN-5954-2)
2023-03-28 00:00:00
Ubuntu: Security Advisory (USN-5954-1)
2023-03-16 00:00:00
Mozilla Firefox Security Advisories (MFSA2023-07, MFSA2023-11) - Windows
2023-05-11 00:00:00
osv
osv
firefox vulnerabilities
2023-03-15 11:30:03
firefox regressions
2023-03-27 03:05:28
ubuntu
ubuntu
Firefox vulnerabilities
2023-03-15 00:00:00
Firefox regressions
2023-03-27 00:00:00
nessus
nessus
Ubuntu 18.04 LTS / 20.04 LTS : Firefox vulnerabilities (USN-5954-1)
2023-03-15 00:00:00
SUSE SLES15 Security Update : MozillaFirefox (SUSE-SU-2023:0728-1)
2023-03-15 00:00:00
Mozilla Firefox < 111.0
2023-03-14 00:00:00
kaspersky
kaspersky
KLA48551 Multiple vulnerabilities in Mozilla Firefox
2023-03-14 00:00:00
mozilla
mozilla
Security Vulnerabilities fixed in Firefox 111 — Mozilla
2023-03-14 00:00:00
gentoo
gentoo
Mozilla Firefox: Multiple Vulnerabilities
2023-05-30 00:00:00
6.5 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
0.001 Low
EPSS
Percentile
50.9%
Related for DEBIANCVE:CVE-2023-28160