Lucene search
Ubuntu.comUB:CVE-2023-32208HistoryMay 10, 2023 - 12:00 a.m.
CVE-2023-32208
2023-05-1000:00:00
ubuntu.com
ubuntu.com
10
cve-2023-32208
service workers
script import
firefox
vulnerability
5.3 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
0.001 Low
EPSS
Percentile
35.1%
Service workers could reveal script base URL due to dynamic import().
This vulnerability affects Firefox < 113.
Notes
| Author | Note |
|---|---|
| tyhicks | mozjs contains a copy of the SpiderMonkey JavaScript engine |
| mdeslaur | starting with Ubuntu 22.04, the firefox package is just a script that installs the Firefox snap |
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| ubuntu | 18.04 | noarch | firefox | < 113.0+build2-0ubuntu0.18.04.1 | UNKNOWN |
| ubuntu | 20.04 | noarch | firefox | < 113.0+build2-0ubuntu0.20.04.1 | UNKNOWN |
| ubuntu | 18.04 | noarch | mozjs38 | < any | UNKNOWN |
| ubuntu | 18.04 | noarch | mozjs52 | < any | UNKNOWN |
| ubuntu | 20.04 | noarch | mozjs52 | < any | UNKNOWN |
| ubuntu | 20.04 | noarch | mozjs68 | < any | UNKNOWN |
| ubuntu | 22.04 | noarch | mozjs78 | < any | UNKNOWN |
| ubuntu | 22.04 | noarch | mozjs91 | < any | UNKNOWN |
Related
debiancve
debiancve
CVE-2023-32208
2023-06-19 10:15:09
veracode
veracode
Information Disclosure
2023-08-06 09:35:15
prion
prion
Design/Logic Flaw
2023-06-19 10:15:00
cvelist
cvelist
CVE-2023-32208
2023-06-19 09:30:32
nvd
nvd
CVE-2023-32208
2023-06-19 10:15:09
cve
cve
CVE-2023-32208
2023-06-19 10:15:09
nessus
nessus
Ubuntu 18.04 LTS / 20.04 LTS : Firefox vulnerabilities (USN-6074-1)
2023-05-15 00:00:00
Fedora 37 : firefox (2023-45b3c1d9ed)
2023-11-07 00:00:00
Fedora 38 : firefox (2023-2a5256e2a3)
2023-11-07 00:00:00
openvas
openvas
Mozilla Firefox Security Advisory (MFSA2023-16) - Linux
2023-05-10 00:00:00
Mozilla Firefox Security Advisories (MFSA2023-16, MFSA2023-17) - Mac OS X
2023-05-11 00:00:00
Ubuntu: Security Advisory (USN-6074-2)
2023-05-17 00:00:00
ubuntu
ubuntu
Firefox regressions
2023-05-24 00:00:00
Firefox regressions
2023-05-16 00:00:00
Firefox vulnerabilities
2023-05-15 00:00:00
osv
osv
firefox vulnerabilities
2023-05-15 04:06:24
firefox regressions
2023-05-24 09:48:18
firefox regressions
2023-05-16 04:18:05
mozilla
mozilla
Security Vulnerabilities fixed in Firefox 113 — Mozilla
2023-05-09 00:00:00
kaspersky
kaspersky
KLA49165 Multiple vulnerabilities in Mozilla Firefox
2023-05-09 00:00:00
gentoo
gentoo
Mozilla Firefox: Multiple Vulnerabilities
2024-01-07 00:00:00
5.3 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
0.001 Low
EPSS
Percentile
35.1%
Related for UB:CVE-2023-32208