Improper Input Validation

🗓️ 24 Mar 2023 15:41:14Reported by Veracode Vulnerability DatabaseType

Firefox improper input validation vulnerability in local file permissions

Reporter	Title	Published	Views	Family All 53
ATTACKERKB	CVE-2023-28161	2 Jun 202317:15	–	attackerkb
AstraLinux	Astra Linux – Vulnerability in Firefox	20 May 202605:53	–	astralinux
BDU FSTEC	The vulnerability of the Mozilla Firefox browser, related to deficiencies in access control, allows attackers to gain unauthorized access to protected information.	23 Mar 202300:00	–	bdu_fstec
Circl	CVE-2023-28161	17 Mar 202318:15	–	circl
CNNVD	Mozilla Firefox 安全漏洞	15 Mar 202300:00	–	cnnvd
CVE	CVE-2023-28161	2 Jun 202300:00	–	cve
Cvelist	CVE-2023-28161	2 Jun 202300:00	–	cvelist
Debian CVE	CVE-2023-28161	2 Jun 202300:00	–	debiancve
EUVD	EUVD-2023-31869	3 Oct 202520:07	–	euvd
Tenable Nessus	Fedora 38 : firefox (2023-ed41d3a922)	22 Mar 202300:00	–	nessus

Vulners

Node

AND

google bionicMatch80.0+build2-0ubuntu0.18.04.1debian

google bionicMatch92.0+build3-0ubuntu0.18.04.1debian

google bionicMatch83.0+build2-0ubuntu0.18.04.2debian

google bionicMatch59.0.2+build1-0ubuntu1debian

google bionicMatch80.0.1+build1-0ubuntu0.18.04.1debian

AND

focal focalMatch75.0+build3-0ubuntu1debian

focal focalMatch80.0.1+build1-0ubuntu0.20.04.1debian

focal focalMatch83.0+build2-0ubuntu0.20.04.1debian

focal focalMatch80.0+build2-0ubuntu0.20.04.1debian

AND

mozilla firefoxMatch83.0-1debian

mozilla firefoxMatch81.0-2debian

mozilla firefoxMatch82.0.3-1debian

Source	Link
git	www.git//git.launchpad.net/ubuntu-cve-tracker/tree/active/CVE-2023-28161
bugzilla	www.bugzilla.mozilla.org/show_bug.cgi
mozilla	www.mozilla.org/security/advisories/mfsa2023-09/

09 Jan 2025 17:19Current

5.8Medium risk

Vulners AI Score5.8

CVSS 3.18.8

EPSS0.00619

SSVC