Information Disclosure

🗓️ 25 Feb 2023 20:50:13Reported by Veracode Vulnerability DatabaseType

firefox vulnerability cross-origin image drag and drop sensitive info disclosur

Reporter	Title	Published	Views	Family All 42
ATTACKERKB	CVE-2023-25741	2 Jun 202317:15	–	attackerkb
AstraLinux	Astra Linux – Vulnerability in Firefox	20 May 202605:53	–	astralinux
BDU FSTEC	The vulnerability in the Firefox web browser, related to the use of an untrusted intermediate policy file, allows a perpetrator to access confidential data.	21 Aug 202300:00	–	bdu_fstec
Circl	CVE-2023-25741	2 Jun 202320:42	–	circl
CNNVD	Mozilla Firefox 安全漏洞	21 Feb 202300:00	–	cnnvd
CNVD	Mozilla Firefox Information Disclosure Vulnerability (CNVD-2023-68439)	23 Feb 202300:00	–	cnvd
CVE	CVE-2023-25741	2 Jun 202300:00	–	cve
Cvelist	CVE-2023-25741	2 Jun 202300:00	–	cvelist
Debian CVE	CVE-2023-25741	2 Jun 202300:00	–	debiancve
EUVD	EUVD-2023-29648	3 Oct 202520:07	–	euvd

Vulners

Node

AND

mozilla firefoxMatch83.0-1debian

mozilla firefoxMatch81.0-2debian

mozilla firefoxMatch82.0.3-1debian

AND

google bionicMatch92.0+build3-0ubuntu0.18.04.1debian

google bionicMatch59.0.2+build1-0ubuntu1debian

google bionicMatch80.0.1+build1-0ubuntu0.18.04.1debian

google bionicMatch83.0+build2-0ubuntu0.18.04.2debian

google bionicMatch80.0+build2-0ubuntu0.18.04.1debian

AND

focal focalMatch80.0+build2-0ubuntu0.20.04.1debian

focal focalMatch75.0+build3-0ubuntu1debian

focal focalMatch83.0+build2-0ubuntu0.20.04.1debian

focal focalMatch80.0.1+build1-0ubuntu0.20.04.1debian

Source	Link
security-tracker	www.security-tracker.debian.org/tracker/CVE-2023-25741
bugzilla	www.bugzilla.mozilla.org/show_bug.cgi
bugzilla	www.bugzilla.mozilla.org/show_bug.cgi
bugzilla	www.bugzilla.mozilla.org/show_bug.cgi
mozilla	www.mozilla.org/security/advisories/mfsa2023-05/

09 Jan 2025 21:19Current

2Low risk

Vulners AI Score2

CVSS 3.16.5

EPSS0.00767

SSVC