PT-2023-2861 · Mozilla+4 · Firefox+4

Nika Layzell · Published 2023-05-09 · Updated 2025-03-14 · CVE-2023-32210

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 113 Firefox ESR (affected versions not specified)

Description The issue is related to insufficient access control to certain functions, which could allow a remote attacker to load a document with higher privileges than intended. This is due to the incorrect assumption of the ordering of principal objects when loading a privileged principal.

Recommendations For Firefox versions prior to 113, update to version 113 or later to resolve the issue. For Firefox ESR, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-264

Related Identifiers

ALT-PU-2023-1773

ALT-PU-2023-5754

ALT-PU-2023-6436

ALT-PU-2024-14035

ALT-PU-2024-3614

ALT-PU-2024-4241

BDU:2023-02808

CVE-2023-32210

OESA-2025-1265

OESA-2025-1268

OPENSUSE-SU-2024:12920-1

OPENSUSE-SU-2024:14572-1

USN-6074-1

USN-6074-2

USN-6074-3

Affected Products

Alt Linux

Astra Linux

Firefox

Linuxmint

Ubuntu

References · 2088

• https://nvd.nist.gov/vuln/detail/CVE-2024-8381 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2024-7531 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2024-3862 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2023-4582 · Security Note
• https://osv.dev/vulnerability/CVE-2023-32210 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-10467 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2024-3852 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2022-36315 · Security Note
• https://ubuntu.com/security/notices/USN-6074-2 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-1932 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2023-32210 · Security Note
• https://osv.dev/vulnerability/openSUSE-SU-2024:14572-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-8384 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2024-10464 · Security Note
• https://ubuntu.com/security/CVE-2023-32208 · Vendor Advisory