PT-2023-1947 · Mozilla+5 · Firefox+5
Kagami Rosylight
+1
·
Published
2023-03-14
·
Updated
2025-03-14
·
CVE-2023-25750
CVSS v2.0
7.3
High
| Vector | AV:N/AC:H/Au:N/C:C/I:P/A:C |
Name of the Vulnerable Software and Affected Versions
Mozilla Firefox versions prior to 111
Description
The issue is related to insufficient protection of service data during the initialization of the offline cache in private browsing mode. This could allow a remote attacker to gain unauthorized access to protected information. Under certain circumstances, a ServiceWorker's offline cache may have leaked to the file system when using private browsing mode.
Recommendations
For versions prior to 111, update to version 111 or later to resolve the issue. As a temporary workaround, consider disabling the use of private browsing mode until a patch is available. Restrict access to sensitive information when using private browsing mode to minimize the risk of exploitation.
Exploit
Fix
Exposure of Resource to Wrong Sphere
Information Disclosure
Path traversal
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Alt Linux
Astra Linux
Linuxmint
Firefox
Suse
Ubuntu