PT-2023-8012 · Mozilla+4 · Firefox+4

Edward Prior + 1 · Published 2023-12-19 · Updated 2025-03-21 · CVE-2023-6871

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 121

Description The issue is related to the absence of a warning when a user attempts to navigate to a new protocol handler under certain conditions. This could potentially allow a remote attacker to impact data integrity.

Recommendations For versions prior to 121, update to a version 121 or later to resolve the issue. As a temporary workaround, consider restricting access to new protocol handlers until a patch is available.

Exploit

Fix

Weakness Enumeration

CWE-357

Related Identifiers

ALT-PU-2023-8231

ALT-PU-2024-13898

ALT-PU-2024-15839

ALT-PU-2024-15840

BDU:2023-09127

CVE-2023-6871

OESA-2025-1322

OESA-2025-1323

OPENSUSE-SU-2024:13531-1

OPENSUSE-SU-2024:14572-1

USN-6562-1

USN-6562-2

Affected Products

Alt Linux

Astra Linux

Firefox

Linuxmint

Ubuntu

References · 1950

• 🔥 https://github.com/mistymntncop/CVE-2023-4863 · Exploit
• 🔥 https://github.com/LOURC0D3/CVE-2024-4367-PoC · Exploit
• 🔥 https://github.com/bjrjk/CVE-2024-29943 · Exploit
• 🔥 https://github.com/s4vvysec/CVE-2024-4367-POC · Exploit
• 🔥 https://github.com/LiveOverflow/webp-CVE-2023-4863 · Exploit
• 🔥 https://github.com/wrv/cve-2023-5217-poc · Exploit
• 🔥 https://github.com/UT-Security/cve-2023-5217-poc · Exploit
• 🔥 https://github.com/Zombie-Kaiser/cve-2024-4367-PoC-fixed · Exploit
• 🔥 https://github.com/spaceraccoon/detect-cve-2024-4367 · Exploit
• 🔥 https://github.com/tdonaworth/Firefox-CVE-2024-9680 · Exploit
• 🔥 https://github.com/bbaranoff/CVE-2023-4863 · Exploit
• https://osv.dev/vulnerability/UBUNTU-CVE-2023-6871 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-5694 · Security Note
• https://osv.dev/vulnerability/CVE-2023-6871 · Vendor Advisory
• https://osv.dev/vulnerability/OESA-2025-1323 · Vendor Advisory