CVE-2023-28163

🗓️ 02 Jun 2023 17:15:00Reported by ubuntu.comType

Windows Firefox Save As dialog resolves environment variable names of suggested filenames in the context of the current user, affecting versions Firefox < 111, Firefox ESR < 102.9, and Thunderbird < 102.9

Reporter	Title	Published	Views	Family All 85
ALT Linux	Security fix for the ALT Linux 10 package thunderbird version 102.9.0-alt1	31 Mar 202300:00	–	altlinux
ALT Linux	Security fix for the ALT Linux 10 package firefox-esr version 102.9.0-alt1	31 Mar 202300:00	–	altlinux
IBM Security Bulletins	Security Bulletin: Due to use of Mozilla Firefox, IBM Cloud Pak for Multicloud Management Monitoring is vulnerable to multiple vulnerabilities.	31 Aug 202311:04	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities of Mozilla Firefox (less than Firefox 102.9ESR) have affected APM Synthetic Playback Agent	22 May 202310:20	–	ibm
ATTACKERKB	CVE-2023-28163	2 Jun 202317:15	–	attackerkb
Tenable Nessus	Amazon Linux 2 : thunderbird (ALAS-2023-1988)	22 Mar 202300:00	–	nessus
Tenable Nessus	Amazon Linux 2 : firefox (ALASFIREFOX-2023-004)	27 Sep 202300:00	–	nessus
Tenable Nessus	Fedora 38 : firefox (2023-ed41d3a922)	22 Mar 202300:00	–	nessus
Tenable Nessus	GLSA-202305-35 : Mozilla Firefox: Multiple Vulnerabilities	30 May 202300:00	–	nessus
Tenable Nessus	GLSA-202305-36 : Mozilla Thunderbird: Multiple Vulnerabilities	30 May 202300:00	–	nessus