Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

debian логотип

CVE-2023-25743

Опубликовано: 02 июн. 2023
Источник: debian
EPSS Низкий

Описание

A lack of in app notification for entering fullscreen mode could have lead to a malicious website spoofing browser chrome.<br>*This bug only affects Firefox Focus. Other versions of Firefox are unaffected.*. This vulnerability affects Firefox < 110 and Firefox ESR < 102.8.

Пакеты

ПакетСтатусВерсия исправленияРелизТип
firefoxnot-affectedpackage
firefox-esrnot-affectedpackage

Примечания

  • https://www.mozilla.org/en-US/security/advisories/mfsa2023-05/#CVE-2023-25743

  • https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-25743

EPSS

Процентиль: 24%
0.00079
Низкий

Связанные уязвимости

CVSS3: 7.5
ubuntu
около 2 лет назад

A lack of in app notification for entering fullscreen mode could have lead to a malicious website spoofing browser chrome.<br>*This bug only affects Firefox Focus. Other versions of Firefox are unaffected.*. This vulnerability affects Firefox < 110 and Firefox ESR < 102.8.

CVSS3: 7.5
redhat
больше 2 лет назад

A lack of in app notification for entering fullscreen mode could have lead to a malicious website spoofing browser chrome.<br>*This bug only affects Firefox Focus. Other versions of Firefox are unaffected.*. This vulnerability affects Firefox < 110 and Firefox ESR < 102.8.

CVSS3: 7.5
nvd
около 2 лет назад

A lack of in app notification for entering fullscreen mode could have lead to a malicious website spoofing browser chrome.<br>*This bug only affects Firefox Focus. Other versions of Firefox are unaffected.*. This vulnerability affects Firefox < 110 and Firefox ESR < 102.8.

CVSS3: 7.5
github
около 2 лет назад

A lack of in app notification for entering fullscreen mode could have lead to a malicious website spoofing browser chrome.<br>*This bug only affects Firefox Focus. Other versions of Firefox are unaffected.*. This vulnerability affects Firefox < 110 and Firefox ESR < 102.8.

CVSS3: 7.5
fstec
больше 2 лет назад

Уязвимость полноэкранного режима браузера Mozilla Firefox, позволяющая нарушителю выполнить спуффинг-атаку

EPSS

Процентиль: 24%
0.00079
Низкий