CVE-2023-25731

Summary

Due to URL previews in the network panel of developer tools improperly storing URLs, query parameters could potentially be used to overwrite global objects in privileged code. This vulnerability affects Firefox < 110.

Affected Software

Weaknesses

• Prototype pollution when rendering URLPreview

ADP Enrichment

CVE Program Container

Additional References

• https://www.mozilla.org/security/advisories/mfsa2023-05/
• https://bugzilla.mozilla.org/show_bug.cgi?id=1801542

CISA ADP Vulnrichment

• SSVC:
• Exploitation: poc
  • Automatable: no
  • Technical Impact: total

Additional References

• https://bugzilla.mozilla.org/show_bug.cgi?id=1801542

References

• https://www.mozilla.org/security/advisories/mfsa2023-05/
• https://bugzilla.mozilla.org/show_bug.cgi?id=1801542

• ←Previous
• Next→