Lucene search
PRIOn knowledge basePRION:CVE-2023-4047HistoryAug 01, 2023 - 3:15 p.m.
Design/Logic Flaw
2023-08-0115:15:00
PRIOn knowledge base
www.prio-n.com
6
popup
notification
delay
bug
attacker
trick
user
permissions
vulnerability
firefox esr
A bug in popup notifications delay calculation could have made it possible for an attacker to trick a user into granting permissions. This vulnerability affects Firefox < 116, Firefox ESR < 102.14, and Firefox ESR < 115.1.
| CPE | Name | Operator | Version |
|---|---|---|---|
| debian_linux | eq | 11.0 | |
| debian_linux | eq | 12.0 | |
| firefox | lt | 116.0 | |
| firefox_esr | ge | 115.0 | |
| firefox_esr | lt | 115.1 | |
| firefox_esr | ge | 102.0 | |
| firefox_esr | lt | 102.14 |
References
bugzilla.mozilla.org/show_bug.cgi?id=1839073
lists.debian.org/debian-lts-announce/2023/08/msg00008.html
lists.debian.org/debian-lts-announce/2023/08/msg00010.html
www.debian.org/security/2023/dsa-5464
www.debian.org/security/2023/dsa-5469
www.mozilla.org/security/advisories/mfsa2023-29/
www.mozilla.org/security/advisories/mfsa2023-30/
www.mozilla.org/security/advisories/mfsa2023-31/
Related
cve
cve
CVE-2023-4047
2023-08-01 15:15:09
ubuntucve
ubuntucve
CVE-2023-4047
2023-08-01 00:00:00
veracode
veracode
Privilege Escalation
2023-08-06 12:06:35
debiancve
debiancve
CVE-2023-4047
2023-08-01 15:15:09
redhatcve
redhatcve
CVE-2023-4047
2023-08-02 08:28:10
nvd
nvd
CVE-2023-4047
2023-08-01 15:15:09
cvelist
cvelist
CVE-2023-4047
2023-08-01 14:57:35
alpinelinux
alpinelinux
CVE-2023-4047
2023-08-01 15:15:09
debian
debian
[SECURITY] [DLA 3523-1] firefox-esr security update
2023-08-09 19:05:02
[SECURITY] [DSA 5464-1] firefox-esr security update
2023-08-03 17:27:01
[SECURITY] [DSA 5469-1] thunderbird security update
2023-08-05 20:47:00
osv
osv
firefox-esr - security update
2023-08-09 00:00:00
thunderbird - security update
2023-08-08 00:00:00
firefox-esr - security update
2023-08-03 00:00:00
nessus
nessus
Debian DSA-5469-1 : thunderbird - security update
2023-08-07 00:00:00
Amazon Linux 2 : firefox (ALASFIREFOX-2023-002)
2023-09-27 00:00:00
Debian DSA-5464-1 : firefox-esr - security update
2023-08-04 00:00:00
openvas
openvas
Debian: Security Advisory (DSA-5464-1)
2023-08-04 00:00:00
Debian: Security Advisory (DSA-5469-1)
2023-08-07 00:00:00
Debian: Security Advisory (DLA-3523-1)
2023-08-10 00:00:00
redhat
redhat
(RHSA-2023:4463) Important: firefox security update
2023-08-03 12:38:01
(RHSA-2023:4462) Important: firefox security update
2023-08-03 12:36:23
(RHSA-2023:4465) Important: firefox security update
2023-08-03 12:42:58
ubuntu
ubuntu
Thunderbird vulnerabilities
2023-09-04 00:00:00
Firefox regressions
2023-08-21 00:00:00
Firefox regressions
2023-08-08 00:00:00
kaspersky
kaspersky
KLA51574 Multiple vulnerabilities in Mozilla Firefox ESR
2023-08-01 00:00:00
KLA51618 Multiple vulnerabilities in Mozilla Thunderbird
2023-08-02 00:00:00
KLA51619 Multiple vulnerabilities in Mozilla Firefox ESR
2023-08-01 00:00:00
mozilla
mozilla
Security Vulnerabilities fixed in Thunderbird 102.14 — Mozilla
2023-08-02 00:00:00
Security Vulnerabilities fixed in Firefox ESR 102.14 — Mozilla
2023-08-01 00:00:00
Security Vulnerabilities fixed in Firefox ESR 115.1 — Mozilla
2023-08-01 00:00:00
oraclelinux
oraclelinux
firefox security update
2023-08-04 00:00:00
firefox security update
2023-08-04 00:00:00
firefox security update
2023-08-06 00:00:00
rocky
rocky
firefox security update
2023-08-08 12:35:00
firefox security update
2023-08-08 12:34:07
thunderbird security update
2023-08-08 12:35:00
almalinux
almalinux
Important: firefox security update
2023-08-03 00:00:00
Important: firefox security update
2023-08-03 00:00:00
Important: thunderbird security update
2023-08-07 00:00:00
rosalinux
rosalinux
Advisory ROSA-SA-2023-2233
2023-09-12 11:49:48
Advisory ROSA-SA-2023-2232
2023-09-12 11:49:20
slackware
slackware
[slackware-security] mozilla-firefox
2023-08-04 20:52:54
redos
redos
ROS-20230908-07
2023-09-08 00:00:00
ROS-20230919-04
2023-09-19 00:00:00
mageia
mageia
Updated firefox/thunderbird packages fix security vulnerability
2023-09-25 01:16:18
gentoo
gentoo
Mozilla Thunderbird: Multiple Vulnerabilities
2024-02-19 00:00:00
ibm
ibm