Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

debian логотип

CVE-2023-5729

Опубликовано: 25 окт. 2023
Источник: debian
EPSS Низкий

Описание

A malicious web site can enter fullscreen mode while simultaneously triggering a WebAuthn prompt. This could have obscured the fullscreen notification and could have been leveraged in a spoofing attack. This vulnerability affects Firefox < 119.

Пакеты

ПакетСтатусВерсия исправленияРелизТип
firefoxfixed119.0-1package

Примечания

  • https://www.mozilla.org/en-US/security/advisories/mfsa2023-45/#CVE-2023-5729

EPSS

Процентиль: 38%
0.00163
Низкий

Связанные уязвимости

CVSS3: 4.3
ubuntu
около 2 лет назад

A malicious web site can enter fullscreen mode while simultaneously triggering a WebAuthn prompt. This could have obscured the fullscreen notification and could have been leveraged in a spoofing attack. This vulnerability affects Firefox < 119.

CVSS3: 4.3
nvd
около 2 лет назад

A malicious web site can enter fullscreen mode while simultaneously triggering a WebAuthn prompt. This could have obscured the fullscreen notification and could have been leveraged in a spoofing attack. This vulnerability affects Firefox < 119.

CVSS3: 4.3
github
около 2 лет назад

A malicious web site can enter fullscreen mode while simultaneously triggering a WebAuthn prompt. This could have obscured the fullscreen notification and could have been leveraged in a spoofing attack. This vulnerability affects Firefox < 119.

CVSS3: 4.7
fstec
около 2 лет назад

Уязвимость полноэкранного режима браузера Firefox, позволяющая нарушителю проводить спуфинг-атаки

suse-cvrf
около 2 лет назад

Security update for MozillaFirefox

EPSS

Процентиль: 38%
0.00163
Низкий