Lucene search

PRIOn knowledge basePRION:CVE-2023-5727

HistoryOct 25, 2023 - 6:17 p.m.

Command injection

2023-10-2518:17:00

PRIOn knowledge base

www.prio-n.com

executable file warning

downloading files

user's computer

firefox

thunderbird

nvd

vulnerability

windows operating systems

6.9 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

22.0%

JSON

The executable file warning was not presented when downloading .msix, .msixbundle, .appx, and .appxbundle files, which can run commands on a user’s computer.
Note: This issue only affected Windows operating systems. Other operating systems are unaffected. This vulnerability affects Firefox < 119, Firefox ESR < 115.4, and Thunderbird < 115.4.1.

CPENameOperatorVersion
firefoxlt119.0
firefox_esrlt115.4
thunderbirdlt115.4.1

Name	Operator	Version
firefox	lt	119.0
firefox_esr	lt	115.4
thunderbird	lt	115.4.1

References

bugzilla.mozilla.org/show_bug.cgi?id=1847180

www.mozilla.org/security/advisories/mfsa2023-45/

www.mozilla.org/security/advisories/mfsa2023-46/

www.mozilla.org/security/advisories/mfsa2023-47/