CVE-2023-37455
published 2023-07-12CVE-2023-37455: The permission request prompt from the site in the background tab was overlaid on top of the site in the foreground tab. This vulnerability affects Firefox for…
PriorityP424medium5.4CVSS 3.1
AVNACLPRNUIRSUCLILAN
EPSS
0.30%
22.1th percentile
The permission request prompt from the site in the background tab was overlaid on top of the site in the foreground tab. This vulnerability affects Firefox for iOS < 115.
Affected
4 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | firefox | — | — |
| mozilla | firefox | < 115 | 115 |
| mozilla | firefox | — | — |
| mozilla | firefox_for_ios | >= unspecified < 115 | 115 |
CVSS provenance
nvdv3.15.4MEDIUMCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N
vendor_debian5.4LOW
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Debian
CVE-2023-37455: firefox - The permission request prompt from the site in the background tab was overlaid o...
vendor_debian·2023·CVSS 5.4
CVE-2023-37455 [MEDIUM] CVE-2023-37455: firefox - The permission request prompt from the site in the background tab was overlaid o...
The permission request prompt from the site in the background tab was overlaid on top of the site in the foreground tab. This vulnerability affects Firefox for iOS < 115.
Scope: local
sid: resolved
Mozilla
Mozilla Foundation Security Advisory 2023-25: CVE-2023-37455
vendor_mozilla·CVSS 5.4
CVE-2023-37455 [MEDIUM] Mozilla Foundation Security Advisory 2023-25: CVE-2023-37455
Mozilla Foundation Security Advisory 2023-25
CVE: CVE-2023-37455
Product: Firefox for iOS
Impact: low
Fixed in: Firefox for iOS 115
GHSA
GHSA-3mvg-pwgj-w59x: The permission request prompt from the site in the background tab was overlaid on top of the site in the foreground tab
ghsa_unreviewed·2023-07-12
CVE-2023-37455 [MEDIUM] CWE-1021 GHSA-3mvg-pwgj-w59x: The permission request prompt from the site in the background tab was overlaid on top of the site in the foreground tab
The permission request prompt from the site in the background tab was overlaid on top of the site in the foreground tab. This vulnerability affects Firefox for iOS < 115.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2023-07-12
Published