PT-2023-6526 · Mozilla · Firefox

Irwan · Publicado 2023-10-24 · Atualizado 2024-01-07 · CVE-2023-5758

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Média

Vetor base

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Firefox for iOS versions prior to 119

Description The issue is related to the reader mode in Firefox, where the structure of a web page is not properly protected, allowing for potential exploitation. This could lead to a reflected Cross-Site Scripting (XSS) attack, where an attacker-controlled script could execute when a page is opened in reader mode. The attack is conducted through a redirect URL.

Recommendations For Firefox for iOS versions prior to 119: Update to version 119 or later to resolve the issue. As a temporary workaround, consider avoiding the use of reader mode until the update is applied. Restrict access to potentially malicious websites to minimize the risk of exploitation.

Correção

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

BDU:2023-07273

CVE-2023-5758

Produtos afetados

Firefox

Referências · 10

• https://vuldb.com/?id.243302 · Nota
• https://bdu.fstec.ru/vul/2023-07273 · Nota de Segurança
• https://security.gentoo.org/glsa/202401-10 · Nota
• https://mozilla.org/en-US/security/advisories/mfsa2023-48 · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2023-5758 · Aviso do Fabricante
• https://twitter.com/CVEnew/status/1716914367222976638 · Publicação no Twitter
• https://bugzilla.mozilla.org/show_bug.cgi?id=1850019 · Nota
• https://mozilla.org/security/advisories/mfsa2023-48 · Aviso do Fabricante
• https://twitter.com/VulmonFeeds/status/1716921007468953643 · Publicação no Twitter
• https://nvd.nist.gov/vuln/detail/CVE-2023-5758 · Nota de Segurança