Lucene search

K
prionPRIOn knowledge basePRION:CVE-2023-34415
HistoryJun 19, 2023 - 11:15 a.m.

Open redirect

2023-06-1911:15:00
PRIOn knowledge base
www.prio-n.com
6
firefox
open redirect
vulnerability
http
data urls
site isolation
protections
spectre
attacks
nvd
firefox < 114

6.8 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

24.1%

When choosing a site-isolated process for a document loaded from a data: URL that was the result of a redirect, Firefox would load that document in the same process as the site that issued the redirect. This bypassed the site-isolation protections against Spectre-like attacks on sites that host an “open redirect”. Firefox no longer follows HTTP redirects to data: URLs. This vulnerability affects Firefox < 114.

CPENameOperatorVersion
firefoxlt114.0

6.8 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

24.1%