PT-2023-1317 · Mozilla+2 · Firefox For Android+2

Kazuki Nomoto · Publicado 2023-01-17 · Atualizado 2024-12-12 · CVE-2023-23600

Positive Technologies (AI Summary)

CVSS v2.0

7.8

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:N/A:N

Name of the Vulnerable Software and Affected Versions Firefox for Android versions prior to 109

Description The issue arises from the way per origin notification permissions were stored, failing to account for the browsing context in which the permission was granted. This could lead to notifications being displayed during different browsing sessions. The problem is specific to Firefox for Android, with other operating systems being unaffected.

Recommendations For Firefox for Android versions prior to 109, update to version 109 or later to resolve the issue. As a temporary workaround, consider restricting notification permissions to minimize the risk of unauthorized access.

Correção

Enumeração de Fraquezas

CWE-371

Identificadores relacionados

ALT-PU-2023-1084

ALT-PU-2023-1478

BDU:2023-00603

CVE-2023-23600

OPENSUSE-SU-2024:12623-1

OPENSUSE-SU-2024:14572-1

Produtos afetados

Alt Linux

Astra Linux

Firefox For Android

Referências · 1871

• https://suse.com/security/cve/CVE-2012-0442 · Nota
• https://suse.com/security/cve/CVE-2012-1958 · Nota
• https://suse.com/security/cve/CVE-2023-25728 · Nota
• https://suse.com/security/cve/CVE-2022-31743 · Nota
• https://suse.com/security/cve/CVE-2018-12392 · Nota
• https://suse.com/security/cve/CVE-2024-5698 · Nota
• https://suse.com/security/cve/CVE-2013-1701 · Nota
• https://suse.com/security/cve/CVE-2024-8382 · Nota
• https://suse.com/security/cve/CVE-2020-15254 · Nota
• https://suse.com/security/cve/CVE-2018-12382 · Nota
• https://suse.com/security/cve/CVE-2014-1574 · Nota
• https://suse.com/security/cve/CVE-2015-7203 · Nota
• https://suse.com/security/cve/CVE-2024-5687 · Nota
• https://suse.com/security/cve/CVE-2012-3967 · Nota
• https://suse.com/security/cve/CVE-2022-26387 · Nota