CVE-2023-25749

Summary

Android applications with unpatched vulnerabilities can be launched from a browser using Intents, exposing users to these vulnerabilities. Firefox will now confirm with users that they want to launch an external application before doing so. <br>This bug only affects Firefox for Android. Other versions of Firefox are unaffected.. This vulnerability affects Firefox < 111.

Affected Software

Weaknesses

• Firefox for Android may have opened third-party apps without a prompt

ADP Enrichment

CVE Program Container

Additional References

• https://www.mozilla.org/security/advisories/mfsa2023-09/
• https://bugzilla.mozilla.org/show_bug.cgi?id=1810705

CISA ADP Vulnrichment

• SSVC:
• Exploitation: none
  • Automatable: no
  • Technical Impact: partial

References

• https://www.mozilla.org/security/advisories/mfsa2023-09/
• https://bugzilla.mozilla.org/show_bug.cgi?id=1810705

• ←Previous
• Next→