CVE-2023-32210 — Mozilla Firefox vulnerability
11 documents6 sources
Severity
6.5MEDIUMNVD
OSV4.3
EPSS
0.2%
top 52.68%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedJun 19
Description
Documents were incorrectly assuming an ordering of principal objects when ensuring we were loading an appropriately privileged principal. In certain circumstances it might have been possible to cause a document to be loaded with a higher privileged principal than intended. This vulnerability affects Firefox < 113.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:NExploitability: 2.8 | Impact: 3.6
Affected Packages5 packages
🔴Vulnerability Details
5GHSA▶
GHSA-2qcf-439j-7273: Documents were incorrectly assuming an ordering of principal objects when ensuring we were loading an appropriately privileged principal↗2023-06-19
OSV▶
CVE-2023-32210: Documents were incorrectly assuming an ordering of principal objects when ensuring we were loading an appropriately privileged principal↗2023-05-10
📋Vendor Advisories
5Debian▶
CVE-2023-32210: firefox - Documents were incorrectly assuming an ordering of principal objects when ensuri...↗2023