Lucene search

K
vulnrichmentMozillaVULNRICHMENT:CVE-2023-4580
HistorySep 11, 2023 - 8:01 a.m.

CVE-2023-4580

2023-09-1108:01:38
mozilla
github.com
notifications
encryption
vulnerability
firefox
thunderbird

AI Score

6.1

Confidence

Low

SSVC

Exploitation

none

Automatable

no

Technical Impact

partial

Push notifications stored on disk in private browsing mode were not being encrypted potentially allowing the leak of sensitive information. This vulnerability affects Firefox < 117, Firefox ESR < 115.2, and Thunderbird < 115.2.