PT-2023-8012 · Mozilla+4 · Firefox+4

Edward Prior + 1 · Publicado 2023-12-19 · Atualizado 2025-03-21 · CVE-2023-6871

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 121

Description The issue is related to the absence of a warning when a user attempts to navigate to a new protocol handler under certain conditions. This could potentially allow a remote attacker to impact data integrity.

Recommendations For versions prior to 121, update to a version 121 or later to resolve the issue. As a temporary workaround, consider restricting access to new protocol handlers until a patch is available.

Exploit

Correção

Enumeração de Fraquezas

CWE-357

Identificadores relacionados

ALT-PU-2023-8231

ALT-PU-2024-13898

ALT-PU-2024-15839

ALT-PU-2024-15840

BDU:2023-09127

CVE-2023-6871

OESA-2025-1322

OESA-2025-1323

OPENSUSE-SU-2024:13531-1

OPENSUSE-SU-2024:14572-1

USN-6562-1

USN-6562-2

Produtos afetados

Alt Linux

Astra Linux

Firefox

Linuxmint

Ubuntu

Referências · 1950

• 🔥 https://github.com/mistymntncop/CVE-2023-4863 · Exploit
• 🔥 https://github.com/LOURC0D3/CVE-2024-4367-PoC · Exploit
• 🔥 https://github.com/bjrjk/CVE-2024-29943 · Exploit
• 🔥 https://github.com/s4vvysec/CVE-2024-4367-POC · Exploit
• 🔥 https://github.com/LiveOverflow/webp-CVE-2023-4863 · Exploit
• 🔥 https://github.com/wrv/cve-2023-5217-poc · Exploit
• 🔥 https://github.com/UT-Security/cve-2023-5217-poc · Exploit
• 🔥 https://github.com/Zombie-Kaiser/cve-2024-4367-PoC-fixed · Exploit
• 🔥 https://github.com/spaceraccoon/detect-cve-2024-4367 · Exploit
• 🔥 https://github.com/tdonaworth/Firefox-CVE-2024-9680 · Exploit
• 🔥 https://github.com/bbaranoff/CVE-2023-4863 · Exploit
• https://suse.com/security/cve/CVE-2018-5153 · Nota
• https://suse.com/security/cve/CVE-2012-5842 · Nota
• https://suse.com/security/cve/CVE-2009-3371 · Nota
• https://suse.com/security/cve/CVE-2013-1738 · Nota