Lucene search

K
prionPRIOn knowledge basePRION:CVE-2023-37203
HistoryJul 05, 2023 - 10:15 a.m.

Input validation

2023-07-0510:15:00
PRIOn knowledge base
www.prio-n.com
4
insufficient validation
drag and drop api
trick end-users
local system files
arbitrary code execution
firefox < 115
nvd

7.3 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

22.1%

Insufficient validation in the Drag and Drop API in conjunction with social engineering, may have allowed an attacker to trick end-users into creating a shortcut to local system files. This could have been leveraged to execute arbitrary code. This vulnerability affects Firefox < 115.

CPENameOperatorVersion
firefoxlt115.0

7.3 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

22.1%