Lucene search
Veracode Vulnerability DatabaseVERACODE:42210HistoryAug 06, 2023 - 9:35 a.m.
Information Disclosure
2023-08-0609:35:15
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
2
firefox
vulnerability
information
disclosure
unauthenticated
attacker
access
script
base urls
dynamic import
sensitive
5.3 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
0.001 Low
EPSS
Percentile
35.1%
firefox is vulnerable to Information Disclosure. A remote unauthenticated attacker is able to gain access to script base URLs due to dynamic import(), resulting in disclosure of sensitive information.
| CPE | Name | Operator | Version |
|---|---|---|---|
| firefox:sid | eq | 81.0-2 | |
| firefox:sid | eq | 83.0-1 | |
| firefox:sid | eq | 82.0.3-1 | |
| firefox:sid | eq | 81.0-2 | |
| firefox:sid | eq | 83.0-1 | |
| firefox:sid | eq | 82.0.3-1 |
Related
debiancve
debiancve
CVE-2023-32208
2023-06-19 10:15:09
prion
prion
Design/Logic Flaw
2023-06-19 10:15:00
cve
cve
CVE-2023-32208
2023-06-19 10:15:09
cvelist
cvelist
CVE-2023-32208
2023-06-19 09:30:32
nvd
nvd
CVE-2023-32208
2023-06-19 10:15:09
ubuntucve
ubuntucve
CVE-2023-32208
2023-05-10 00:00:00
nessus
nessus
Ubuntu 18.04 LTS / 20.04 LTS : Firefox vulnerabilities (USN-6074-1)
2023-05-15 00:00:00
Fedora 37 : firefox (2023-45b3c1d9ed)
2023-11-07 00:00:00
Fedora 38 : firefox (2023-2a5256e2a3)
2023-11-07 00:00:00
openvas
openvas
Mozilla Firefox Security Advisory (MFSA2023-16) - Linux
2023-05-10 00:00:00
Ubuntu: Security Advisory (USN-6074-3)
2023-05-25 00:00:00
Mozilla Firefox Security Advisories (MFSA2023-16, MFSA2023-17) - Mac OS X
2023-05-11 00:00:00
osv
osv
firefox vulnerabilities
2023-05-15 04:06:24
firefox regressions
2023-05-24 09:48:18
firefox regressions
2023-05-16 04:18:05
ubuntu
ubuntu
Firefox regressions
2023-05-16 00:00:00
Firefox regressions
2023-05-24 00:00:00
Firefox vulnerabilities
2023-05-15 00:00:00
mozilla
mozilla
Security Vulnerabilities fixed in Firefox 113 — Mozilla
2023-05-09 00:00:00
kaspersky
kaspersky
KLA49165 Multiple vulnerabilities in Mozilla Firefox
2023-05-09 00:00:00
gentoo
gentoo
Mozilla Firefox: Multiple Vulnerabilities
2024-01-07 00:00:00
5.3 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
0.001 Low
EPSS
Percentile
35.1%
Related for VERACODE:42210