Lucene search

K
vulnrichmentMozillaVULNRICHMENT:CVE-2023-5727
HistoryOct 24, 2023 - 12:47 p.m.

CVE-2023-5727

2023-10-2412:47:13
mozilla
github.com
2
executable file warning
.msix files
.appx files
vulnerability
firefox
thunderbird
windows

AI Score

6.2

Confidence

Low

EPSS

0.001

Percentile

26.8%

SSVC

Exploitation

none

Automatable

no

Technical Impact

partial

The executable file warning was not presented when downloading .msix, .msixbundle, .appx, and .appxbundle files, which can run commands on a user’s computer.
Note: This issue only affected Windows operating systems. Other operating systems are unaffected. This vulnerability affects Firefox < 119, Firefox ESR < 115.4, and Thunderbird < 115.4.1.

AI Score

6.2

Confidence

Low

EPSS

0.001

Percentile

26.8%

SSVC

Exploitation

none

Automatable

no

Technical Impact

partial