CVE-2023-25734 — Open Redirect in Mozilla Firefox

CWE-601 — Open RedirectCWE-73 — External Control of File Name or Path9 documents7 sources
Severity
8.1HIGHNVD
EPSS
0.2%
top 60.46%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
3
Mozilla FirefoxMozilla Firefox ESRMozilla Thunderbird
Timeline
PublishedJun 2

Description

After downloading a Windows .url shortcut from the local filesystem, an attacker could supply a remote path that would lead to unexpected network requests from the operating system. This also had the potential to leak NTLM credentials to the resource.*This bug only affects Firefox on Windows. Other operating systems are unaffected.*. This vulnerability affects Firefox < 110, Thunderbird < 102.8, and Firefox ESR < 102.8.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:NExploitability: 2.8 | Impact: 5.2

Affected Packages6 packages

▶CVEListV5mozilla/firefoxunspecified — 110
▶NVDmozilla/firefox< 110.0
▶CVEListV5mozilla/firefox_esrunspecified — 102.8
▶NVDmozilla/firefox_esr< 102.8
▶CVEListV5mozilla/thunderbirdunspecified — 102.8

🔴Vulnerability Details

2
GHSA
GHSA-wpvr-v2cc-f6qx: After downloading a Windows↗2023-06-02
▶
CVEList
CVE-2023-25734: After downloading a Windows↗2023-06-02
▶

📋Vendor Advisories

5
Red Hat
Mozilla: Opening local .url files could cause unexpected network loads↗2023-02-14
▶
Debian
CVE-2023-25734: firefox - After downloading a Windows <code>.url</code> shortcut from the local filesystem...↗2023
▶
Mozilla
Mozilla Foundation Security Advisory 2023-05: CVE-2023-25734↗
▶
Mozilla
Mozilla Foundation Security Advisory 2023-06: CVE-2023-25734↗
▶
Mozilla
Mozilla Foundation Security Advisory 2023-07: CVE-2023-25734↗
▶

💬Community

1
Bugzilla
.URL Extension Download Via Drag and Drop↗2023-04-17
▶
CVE-2023-25734 — Open Redirect in Mozilla Firefox | cvebase