CVE-2023-4583

Katalog CVE

CVSS 7.5 · High EPSS 0,69%

Kerentanan Improper Check for Unusual or Exceptional Conditions pada mozilla firefox, mozilla firefox esr +1 lainnya. Skor CVSS 3.1 7.5 (High) menurut NVD.

Deskripsi (NVD)

When checking if the Browsing Context had been discarded in `HttpBaseChannel`, if the load group was not available then it was assumed to have already been discarded which was not always the case for private channels after the private session had ended. This vulnerability affects Firefox < 117, Firefox ESR < 115.2, and Thunderbird < 115.2.

Rincian

Terbit di NVD

11 September 2023

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

7.5 (High), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-754: Improper Check for Unusual or Exceptional Conditions

EPSS (30 hari)

0,69% peluang dieksploitasi; lebih tinggi dari 51,3% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://www.mozilla.org/security/advisories/mfsa2023-34/ advisory vendor
• https://www.mozilla.org/security/advisories/mfsa2023-36/ advisory vendor
• https://www.mozilla.org/security/advisories/mfsa2023-38/ advisory vendor
• https://bugzilla.mozilla.org/show_bug.cgi?id=1842030 issue tracking