Lucene search

K
debiancveDebian Security Bug TrackerDEBIANCVE:CVE-2023-49061
HistoryNov 21, 2023 - 3:15 p.m.

CVE-2023-49061

2023-11-2115:15:07
Debian Security Bug Tracker
security-tracker.debian.org
6
html template injection
firefox
ios
cve-2023-49061
vulnerability
exfiltration
user information
reader mode

6.1 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

6.5 Medium

AI Score

Confidence

Low

0.0005 Low

EPSS

Percentile

17.1%

An attacker could have performed HTML template injection via Reader Mode and exfiltrated user information. This vulnerability affects Firefox for iOS < 120.

OSVersionArchitecturePackageVersionFilename
Debian999allfirefox< 127.0.2-1firefox_127.0.2-1_all.deb

6.1 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

6.5 Medium

AI Score

Confidence

Low

0.0005 Low

EPSS

Percentile

17.1%

Related for DEBIANCVE:CVE-2023-49061