Início
Tendências
Vulnerabilidades
Notícias
Pesquisadores
Por que dbugs?

Max Vlasov

#23196de 53,635
10CVSS total
Vulnerabilidades · 1
PT-2023-4028
10
2023-08-01
Mozilla · Firefox · CVE-2023-4045
**Name of the Vulnerable Software and Affected Versions** Firefox versions prior to 116 Firefox ESR versions prior to 102.14 Firefox ESR versions prior to 115.1 **Description** The issue is related to the Offscreen Canvas function in Firefox browsers, which did not properly track cross-origin tainting. This could have allowed access to image data from another site, violating the same-origin policy. The vulnerability could be exploited by a remote attacker to execute arbitrary code. **Recommendations** For Firefox versions prior to 116, update to version 116 or later. For Firefox ESR versions prior to 102.14, update to version 102.14 or later. For Firefox ESR versions prior to 115.1, update to version 115.1 or later.