PT-2023-3727 · Mozilla+5 · Firefox+5
Rohan Sharma
·
Publicado
2023-07-04
·
Atualizado
2025-03-14
·
CVE-2023-37205
CVSS v2.0
7.8
Alta
| Vetor | AV:N/AC:L/Au:N/C:N/I:C/A:N |
Name of the Vulnerable Software and Affected Versions
Mozilla Firefox versions prior to 115
Description
The issue is related to errors in the representation of information by the user interface, specifically with the RTL Arabic Character Handler component. It may allow a remote attacker to conduct spoofing attacks using a specially crafted web page. The use of RTL Arabic characters in the address bar may have allowed for URL spoofing.
Recommendations
For versions prior to 115, update to version 115 or later to resolve the issue. As a temporary workaround, consider avoiding the use of RTL Arabic characters in the address bar until the update is applied. Restrict access to potentially vulnerable web pages to minimize the risk of exploitation.
Correção
UI Misrepresentation of Critical Information
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Alt Linux
Astra Linux
Linuxmint
Firefox
Suse
Ubuntu