PT-2023-1947 · Mozilla+5 · Firefox+5
Kagami Rosylight
+1
·
Publicado
2023-03-14
·
Atualizado
2025-03-14
·
CVE-2023-25750
CVSS v2.0
7.3
Alta
| Vetor | AV:N/AC:H/Au:N/C:C/I:P/A:C |
Name of the Vulnerable Software and Affected Versions
Mozilla Firefox versions prior to 111
Description
The issue is related to insufficient protection of service data during the initialization of the offline cache in private browsing mode. This could allow a remote attacker to gain unauthorized access to protected information. Under certain circumstances, a ServiceWorker's offline cache may have leaked to the file system when using private browsing mode.
Recommendations
For versions prior to 111, update to version 111 or later to resolve the issue. As a temporary workaround, consider disabling the use of private browsing mode until a patch is available. Restrict access to sensitive information when using private browsing mode to minimize the risk of exploitation.
Exploit
Correção
Exposure of Resource to Wrong Sphere
Information Disclosure
Path traversal
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Identificadores relacionados
Produtos afetados
Alt Linux
Astra Linux
Linuxmint
Firefox
Suse
Ubuntu