vulnerability

Alpine Linux: CVE-2023-29541: Improper Encoding or Escaping of Output

Severity
9
CVSS
(AV:N/AC:M/Au:N/C:C/I:C/A:C)
Published
Jun 2, 2023
Added
Aug 22, 2024
Modified
Oct 2, 2024

Description

Firefox did not properly handle downloads of files ending in .desktop, which can be interpreted to run attacker-controlled commands.
*This bug only affects Firefox for Linux on certain Distributions. Other operating systems are unaffected, and Mozilla is unable to enumerate all affected Linux Distributions.*. This vulnerability affects Firefox

Solution

alpine-linux-upgrade-firefox-esr
Title
NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.