Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

debian логотип

CVE-2023-32205

Опубликовано: 02 июн. 2023
Источник: debian

Описание

In multiple cases browser prompts could have been obscured by popups controlled by content. These could have led to potential user confusion and spoofing attacks. This vulnerability affects Firefox < 113, Firefox ESR < 102.11, and Thunderbird < 102.11.

Пакеты

ПакетСтатусВерсия исправленияРелизТип
firefoxfixed113.0-1package
firefox-esrfixed102.11.0esr-1package
thunderbirdfixed1:102.11.0-1package

Примечания

  • https://www.mozilla.org/en-US/security/advisories/mfsa2023-16/#CVE-2023-32205

  • https://www.mozilla.org/en-US/security/advisories/mfsa2023-17/#CVE-2023-32205

  • https://www.mozilla.org/en-US/security/advisories/mfsa2023-18/#CVE-2023-32205

Связанные уязвимости

CVSS3: 4.3
ubuntu
около 2 лет назад

In multiple cases browser prompts could have been obscured by popups controlled by content. These could have led to potential user confusion and spoofing attacks. This vulnerability affects Firefox < 113, Firefox ESR < 102.11, and Thunderbird < 102.11.

CVSS3: 7.5
redhat
около 2 лет назад

In multiple cases browser prompts could have been obscured by popups controlled by content. These could have led to potential user confusion and spoofing attacks. This vulnerability affects Firefox < 113, Firefox ESR < 102.11, and Thunderbird < 102.11.

CVSS3: 4.3
nvd
около 2 лет назад

In multiple cases browser prompts could have been obscured by popups controlled by content. These could have led to potential user confusion and spoofing attacks. This vulnerability affects Firefox < 113, Firefox ESR < 102.11, and Thunderbird < 102.11.

CVSS3: 6.5
github
около 2 лет назад

In multiple cases browser prompts could have been obscured by popups controlled by content. These could have led to potential user confusion and spoofing attacks. This vulnerability affects Firefox < 113, Firefox ESR < 102.11, and Thunderbird < 102.11.

CVSS3: 6.3
fstec
около 2 лет назад

Уязвимость браузеров Firefox и Firefox ESR, связанная с ошибками представления информации пользовательским интерфейсом, позволяющая нарушителю выполнить спуфинговую атаку