PT-2023-3727 · Mozilla+5 · Firefox+5
Rohan Sharma
·
Published
2023-07-04
·
Updated
2025-03-14
·
CVE-2023-37205
CVSS v2.0
7.8
High
| Vector | AV:N/AC:L/Au:N/C:N/I:C/A:N |
Name of the Vulnerable Software and Affected Versions
Mozilla Firefox versions prior to 115
Description
The issue is related to errors in the representation of information by the user interface, specifically with the RTL Arabic Character Handler component. It may allow a remote attacker to conduct spoofing attacks using a specially crafted web page. The use of RTL Arabic characters in the address bar may have allowed for URL spoofing.
Recommendations
For versions prior to 115, update to version 115 or later to resolve the issue. As a temporary workaround, consider avoiding the use of RTL Arabic characters in the address bar until the update is applied. Restrict access to potentially vulnerable web pages to minimize the risk of exploitation.
Fix
UI Misrepresentation of Critical Information
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Alt Linux
Astra Linux
Linuxmint
Firefox
Suse
Ubuntu