Lucene search

K
debiancveDebian Security Bug TrackerDEBIANCVE:CVE-2023-4580
HistorySep 11, 2023 - 9:15 a.m.

CVE-2023-4580

2023-09-1109:15:09
Debian Security Bug Tracker
security-tracker.debian.org
10
push notifications
private browsing
encryption
sensitive information
firefox
thunderbird
vulnerability

0.001 Low

EPSS

Percentile

25.5%

Push notifications stored on disk in private browsing mode were not being encrypted potentially allowing the leak of sensitive information. This vulnerability affects Firefox < 117, Firefox ESR < 115.2, and Thunderbird < 115.2.