Lucene search
PRIOn knowledge basePRION:CVE-2023-6209HistoryNov 21, 2023 - 3:15 p.m.
Path traversal
2023-11-2115:15:00
PRIOn knowledge base
www.prio-n.com
6
path traversal
relative urls
incorrect parsing
security problems
web sites
vulnerability
firefox
thunderbird
Relative URLs starting with three slashes were incorrectly parsed, and a path-traversal “/…/” part in the path could be used to override the specified host. This could contribute to security problems in web sites. This vulnerability affects Firefox < 120, Firefox ESR < 115.5.0, and Thunderbird < 115.5.
| CPE | Name | Operator | Version |
|---|---|---|---|
| debian_linux | eq | 10.0 | |
| debian_linux | eq | 11.0 | |
| debian_linux | eq | 12.0 | |
| firefox | lt | 120.0 | |
| firefox_esr | lt | 115.5.0 | |
| thunderbird | lt | 115.5 |
References
bugzilla.mozilla.org/show_bug.cgi?id=1858570
lists.debian.org/debian-lts-announce/2023/11/msg00017.html
lists.debian.org/debian-lts-announce/2023/11/msg00030.html
www.debian.org/security/2023/dsa-5561
www.mozilla.org/security/advisories/mfsa2023-49/
www.mozilla.org/security/advisories/mfsa2023-50/
www.mozilla.org/security/advisories/mfsa2023-52/
Related
redhatcve
redhatcve
CVE-2023-6209
2023-11-21 23:10:21
nvd
nvd
CVE-2023-6209
2023-11-21 15:15:07
ubuntucve
ubuntucve
CVE-2023-6209
2023-11-21 00:00:00
alpinelinux
alpinelinux
CVE-2023-6209
2023-11-21 15:15:07
veracode
veracode
Path Traversal
2023-11-28 14:17:50
cve
cve
CVE-2023-6209
2023-11-21 15:15:07
debiancve
debiancve
CVE-2023-6209
2023-11-21 15:15:07
cvelist
cvelist
CVE-2023-6209
2023-11-21 14:28:53
attackerkb
attackerkb
CVE-2023-6209
2023-11-21 00:00:00
openvas
openvas
redhat
redhat
(RHSA-2023:7502) Important: thunderbird security update
2023-11-27 15:03:33
(RHSA-2023:7508) Important: firefox security update
2023-11-27 15:07:07
(RHSA-2023:7511) Important: firefox security update
2023-11-27 15:09:14
nessus
nessus
Mozilla Thunderbird < 115.5
2023-11-22 00:00:00
RHEL 9 : thunderbird (RHSA-2023:7499)
2023-11-27 00:00:00
RHEL 8 : thunderbird (RHSA-2023:7500)
2023-11-27 00:00:00
osv
osv
thunderbird - security update
2023-11-30 00:00:00
Important: firefox security update
2023-11-27 00:00:00
Important: thunderbird security update
2023-11-27 00:00:00
mageia
mageia
Updated thunderbird packages fix security vulnerabilities
2023-12-08 13:55:49
Updated firefox packages fix security vulnerabilities
2023-12-08 13:55:49
oraclelinux
oraclelinux
firefox security update
2023-11-28 00:00:00
thunderbird security update
2023-11-28 00:00:00
firefox security update
2023-11-28 00:00:00
almalinux
almalinux
Important: thunderbird security update
2023-11-27 00:00:00
Important: thunderbird security update
2023-11-27 00:00:00
Important: firefox security update
2023-11-27 00:00:00
kaspersky
kaspersky
KLA62089 Multiple vulnerabilities in Mozilla Firefox ESR
2023-11-21 00:00:00
KLA62090 Multiple vulnerabilities in Mozilla Thunderbird
2023-11-21 00:00:00
KLA62070 Multiple vulnerabilities in Mozilla Firefox
2023-11-21 00:00:00
amazon
amazon
Important: thunderbird
2024-01-03 21:04:00
debian
debian
[SECURITY] [DLA 3661-1] firefox-esr security update
2023-11-23 22:42:30
[SECURITY] [DLA 3674-1] thunderbird security update
2023-11-30 14:26:11
[SECURITY] [DSA 5566-1] thunderbird security update
2023-11-26 00:04:01
mozilla
mozilla
Security Vulnerabilities fixed in Firefox ESR 115.5.0 — Mozilla
2023-11-21 00:00:00
Security Vulnerabilities fixed in Thunderbird 115.5 — Mozilla
2023-11-21 00:00:00
Security Vulnerabilities fixed in Firefox 120 — Mozilla
2023-11-21 00:00:00
slackware
slackware
[slackware-security] mozilla-thunderbird
2023-11-22 19:38:40
[slackware-security] mozilla-firefox
2023-11-21 21:38:12
rocky
rocky
thunderbird security update
2023-11-28 22:43:36
ubuntu
ubuntu
Thunderbird vulnerabilities
2023-11-27 00:00:00
Firefox vulnerabilities
2023-11-23 00:00:00
Firefox regressions
2023-12-04 00:00:00
gentoo
gentoo
Mozilla Thunderbird: Multiple Vulnerabilities
2024-02-19 00:00:00