Lucene search

K
prionPRIOn knowledge basePRION:CVE-2023-25740
HistoryJun 02, 2023 - 5:15 p.m.

Design/Logic Flaw

2023-06-0217:15:00
PRIOn knowledge base
www.prio-n.com
2
windows
.scf script
vulnerability
remote network requests
ntlm credentials
firefox
nvd

7.8 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

57.7%

After downloading a Windows <code>.scf</code> script from the local filesystem, an attacker could supply a remote path that would lead to unexpected network requests from the operating system. This also had the potential to leak NTLM credentials to the resource.<br>This bug only affects Firefox for Windows. Other operating systems are unaffected.. This vulnerability affects Firefox < 110.

CPENameOperatorVersion
firefoxlt110.0

7.8 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

57.7%