PT-2023-9374 · Mozilla+5 · Firefox+5
Ameen Basha M K
·
Publicado
2023-01-27
·
Atualizado
2025-03-14
·
CVE-2023-37206
CVSS v2.0
7.8
Alta
| Vetor | AV:N/AC:L/Au:N/C:C/I:N/A:N |
Name of the Vulnerable Software and Affected Versions
Firefox versions prior to 115
Description
The issue is related to incorrect handling of symbolic links before accessing a file, potentially allowing a remote attacker to gain access to confidential data. Uploading files containing symlinks may trick a user into submitting sensitive data to a malicious website.
Recommendations
For versions prior to 115, update to version 115 or later to resolve the issue. As a temporary workaround, consider restricting file uploads or disabling the feature that handles symlinks to minimize the risk of exploitation. Avoid using the file upload feature in the affected versions until the issue is resolved.
Exploit
Correção
Link Following
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Alt Linux
Astra Linux
Firefox
Linuxmint
Suse
Ubuntu