vulnerability
MFSA2023-01 Firefox: Security Vulnerabilities fixed in Firefox 109 (CVE-2023-23603)
| Severity | CVSS | Published | Added | Modified |
|---|---|---|---|---|
| 7 | (AV:N/AC:M/Au:N/C:C/I:N/A:N) | Jan 17, 2023 | Jan 18, 2023 | Jan 30, 2025 |
Severity
7
CVSS
(AV:N/AC:M/Au:N/C:C/I:N/A:N)
Published
Jan 17, 2023
Added
Jan 18, 2023
Modified
Jan 30, 2025
Description
Regular expressions used to filter out forbidden properties and values from style directives in calls to console.log weren't accounting for external URLs. Data could then be potentially exfiltrated from the browser. This vulnerability affects Firefox
Solution
mozilla-firefox-upgrade-109_0
NEW
Explore Exposure Command
Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.