CVE-2023-37203

Katalog CVE

CVSS 7.8 · High EPSS 0,25%

Kerentanan pada mozilla firefox. Skor CVSS 3.1 7.8 (High) menurut NVD.

Deskripsi (NVD)

Insufficient validation in the Drag and Drop API in conjunction with social engineering, may have allowed an attacker to trick end-users into creating a shortcut to local system files. This could have been leveraged to execute arbitrary code. This vulnerability affects Firefox < 115.

Rincian

Terbit di NVD

5 Juli 2023

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

7.8 (High), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H · uraikan di kalkulator

EPSS (30 hari)

0,25% peluang dieksploitasi; lebih tinggi dari 15,6% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://www.mozilla.org/security/advisories/mfsa2023-22/ advisory vendor
• https://bugzilla.mozilla.org/show_bug.cgi?id=291640 issue tracking · permissions required
• https://security.gentoo.org/glsa/202401-10