Name: CVE-2023-25750: Exposure of Resource to Wrong Sphere
Creator: Rapid7
Published: 2023-06-02T00:00:00.000Z
License: https://www.rapid7.com/legal/website-terms-of-use/
Keywords: CVE, CVE-2023-25750, CWE-668, CWE-22, CVSS 4.3, EPSS 0.00111

Under certain circumstances, a ServiceWorker's offline cache may have leaked to the file system when using private browsing mode. This vulnerability affects Firefox < 111.

CVSS Details

CVSS 3.1 Base Score: 4.3
CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N)

Covered by Rapid7

Product	Vendor Advisory	Solution File	Added	Published
Gentoo Linux	—	Upgrade www-client/firefox-bin.Upgrade www-client/firefox.	May 31, 2023	May 30, 2023
Mfsa2023 09	—	Upgrade to Mozilla Firefox version 111.0Upgrade to the latest version of Mozilla Firefox	Mar 15, 2023	Mar 14, 2023
Suse	—	Upgrade MozillaFirefox-develUpgrade mozillafirefox-branding-upstreamUpgrade MozillaFirefoxUpgrade MozillaFirefox-translations-otherUpgrade MozillaFirefox-translations-common	Mar 15, 2023	Mar 14, 2023
Ubuntu	—	Upgrade firefox	Mar 22, 2023	Mar 15, 2023

Prioritize with Active Threat Intelligence

With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.

Explore Intelligence Hub

MDR Buyer's Guide

Global Threat Landscape Report

Grow your business

CVSS Details

Covered by Rapid7

Prioritize with Active Threat Intelligence