Lucene search
PRIOn knowledge basePRION:CVE-2023-5732HistoryOct 25, 2023 - 6:17 p.m.
Code injection
2023-10-2518:17:00
PRIOn knowledge base
www.prio-n.com
10
malicious link
bidirectional characters
address bar spoofing
firefox
thunderbird
vulnerability
An attacker could have created a malicious link using bidirectional characters to spoof the location in the address bar when visited. This vulnerability affects Firefox < 117, Firefox ESR < 115.4, and Thunderbird < 115.4.1.
| CPE | Name | Operator | Version |
|---|---|---|---|
| debian_linux | eq | 10.0 | |
| debian_linux | eq | 11.0 | |
| firefox | lt | 117.0 | |
| firefox_esr | lt | 115.4.1 | |
| thunderbird | lt | 115.4.1 |
References
bugzilla.mozilla.org/show_bug.cgi?id=1690979
bugzilla.mozilla.org/show_bug.cgi?id=1836962
lists.debian.org/debian-lts-announce/2023/10/msg00037.html
lists.debian.org/debian-lts-announce/2023/10/msg00042.html
www.debian.org/security/2023/dsa-5535
www.debian.org/security/2023/dsa-5538
www.mozilla.org/security/advisories/mfsa2023-34/
www.mozilla.org/security/advisories/mfsa2023-46/
www.mozilla.org/security/advisories/mfsa2023-47/
Related
alpinelinux
alpinelinux
CVE-2023-5732
2023-10-25 18:17:44
debiancve
debiancve
CVE-2023-5732
2023-10-25 18:17:44
cve
cve
CVE-2023-5732
2023-10-25 18:17:44
veracode
veracode
Spoofing Attacks
2023-10-27 21:03:54
ubuntucve
ubuntucve
CVE-2023-5732
2023-10-25 00:00:00
redhatcve
redhatcve
CVE-2023-5732
2023-10-24 18:28:46
nvd
nvd
CVE-2023-5732
2023-10-25 18:17:44
cvelist
cvelist
CVE-2023-5732
2023-10-24 12:47:17
osv
osv
firefox-esr - security update
2023-10-27 00:00:00
thunderbird - security update
2023-10-29 00:00:00
firefox-esr - security update
2023-10-25 00:00:00
openvas
openvas
Debian: Security Advisory (DSA-5538-1)
2023-10-30 00:00:00
Mageia: Security Advisory (MGASA-2023-0308)
2023-11-07 00:00:00
Debian: Security Advisory (DLA-3637-1)
2023-10-30 00:00:00
mageia
mageia
Updated nss and firefox packages fix security vulnerabilities
2023-11-07 02:08:32
Updated thunderbird packages fix security vulnerabilities
2023-11-07 02:08:32
debian
debian
[SECURITY] [DSA 5538-1] thunderbird security update
2023-10-28 12:34:11
[SECURITY] [DLA 3637-1] thunderbird security update
2023-10-29 09:05:55
[SECURITY] [DSA 5535-1] firefox-esr security update
2023-10-25 19:14:08
nessus
nessus
Debian DSA-5535-1 : firefox-esr - security update
2023-10-25 00:00:00
Debian DLA-3632-1 : firefox-esr - LTS security update
2023-10-27 00:00:00
Debian DLA-3637-1 : thunderbird - LTS security update
2023-10-29 00:00:00
amazon
amazon
Important: thunderbird
2023-11-09 19:19:00
ubuntu
ubuntu
Thunderbird vulnerabilities
2023-11-02 00:00:00
redhat
redhat
(RHSA-2023:6191) Important: thunderbird security update
2023-10-30 16:35:50
(RHSA-2023:6189) Important: firefox security update
2023-10-30 16:33:08
(RHSA-2023:6196) Important: thunderbird security update
2023-10-30 16:39:37
rocky
rocky
firefox security update
2023-11-11 23:00:15
oraclelinux
oraclelinux
firefox security update
2023-10-31 00:00:00
thunderbird security update
2023-10-31 00:00:00
thunderbird security update
2023-10-31 00:00:00
almalinux
almalinux
Important: thunderbird security update
2023-10-30 00:00:00
Important: firefox security update
2023-10-30 00:00:00
Important: firefox security update
2023-10-30 00:00:00
mozilla
mozilla
Security Vulnerabilities fixed in Thunderbird 115.4.1 — Mozilla
2023-10-24 00:00:00
Security Vulnerabilities fixed in Firefox ESR 115.4 — Mozilla
2023-10-24 00:00:00
Security Vulnerabilities fixed in Firefox 117 — Mozilla
2023-08-29 00:00:00
slackware
slackware
[slackware-security] mozilla-thunderbird
2023-10-26 20:00:50
[slackware-security] mozilla-firefox
2023-10-24 22:27:04
kaspersky
kaspersky
KLA61570 Multiple vulnerabilities in Mozilla Thunderbird
2023-10-24 00:00:00
KLA61569 Multiple vulnerabilities in Mozilla Firefox ESR
2023-10-24 00:00:00
KLA52660 Multiple vulnerabilities in Mozilla Firefox
2023-08-29 00:00:00
gentoo
gentoo
Mozilla Thunderbird: Multiple Vulnerabilities
2024-02-19 00:00:00
ibm
ibm