PT-2022-6825 · Mozilla+9 · Thunderbird+11
Dan Veditz
·
Published
2022-11-15
·
Updated
2025-01-10
·
CVE-2023-23603
CVSS v2.0
7.8
High
| Vector | AV:N/AC:L/Au:N/C:C/I:N/A:N |
Name of the Vulnerable Software and Affected Versions
Firefox versions prior to 109
Thunderbird versions prior to 102.7
Firefox ESR versions prior to 102.7
Description
The issue is related to insufficient processing of regular expressions used to filter out forbidden properties and values from style directives in calls to
console.log. This could potentially allow data exfiltration from the browser.Recommendations
For Firefox versions prior to 109, update to version 109 or later.
For Thunderbird versions prior to 102.7, update to version 102.7 or later.
For Firefox ESR versions prior to 102.7, update to version 102.7 or later.
Fix
Allocation of Resources Without Limits
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Alt Linux
Almalinux
Astra Linux
Centos
Firefox
Firefox Esr
Linuxmint
Red Hat
Rocky Linux
Suse
Thunderbird
Ubuntu