Lucene search

K
prionPRIOn knowledge basePRION:CVE-2023-28163
HistoryJun 02, 2023 - 5:15 p.m.

Code injection

2023-06-0217:15:00
PRIOn knowledge base
www.prio-n.com
4
code injection
windows
firefox
thunderbird
vulnerability
nvd

6.4 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

39.8%

When downloading files through the Save As dialog on Windows with suggested filenames containing environment variable names, Windows would have resolved those in the context of the current user. <br>This bug only affects Firefox on Windows. Other versions of Firefox are unaffected.. This vulnerability affects Firefox < 111, Firefox ESR < 102.9, and Thunderbird < 102.9.