CVE-2023-5758
published 2023-10-25CVE-2023-5758: When opening a page in reader mode, the redirect URL could have caused attacker-controlled script to execute in a reflected Cross-Site Scripting (XSS) attack…
PriorityP422medium6.1CVSS 3.1
AVNACLPRNUIRSCCLILAN
EPSS
0.51%
42.9th percentile
When opening a page in reader mode, the redirect URL could have caused attacker-controlled script to execute in a reflected Cross-Site Scripting (XSS) attack. This vulnerability affects Firefox for iOS < 119.
Affected
4 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | firefox | — | — |
| mozilla | firefox | — | — |
| mozilla | firefox_for_ios | >= unspecified < 119 | 119 |
| mozilla | firefox_mobile | < 119.0 | 119.0 |
CVSS provenance
nvdv3.16.1MEDIUMCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
vendor_debian6.1LOW
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Debian
CVE-2023-5758: firefox - When opening a page in reader mode, the redirect URL could have caused attacker-...
vendor_debian·2023·CVSS 6.1
CVE-2023-5758 [MEDIUM] CVE-2023-5758: firefox - When opening a page in reader mode, the redirect URL could have caused attacker-...
When opening a page in reader mode, the redirect URL could have caused attacker-controlled script to execute in a reflected Cross-Site Scripting (XSS) attack. This vulnerability affects Firefox for iOS < 119.
Scope: local
sid: resolved
Mozilla
Mozilla Foundation Security Advisory 2023-48: CVE-2023-5758
vendor_mozilla·CVSS 6.1
CVE-2023-5758 [MEDIUM] Mozilla Foundation Security Advisory 2023-48: CVE-2023-5758
Mozilla Foundation Security Advisory 2023-48
CVE: CVE-2023-5758
Product: Firefox for iOS
Impact: high
Fixed in: Firefox for iOS 119
VulDB
Mozilla Firefox up to 118 on iOS Reader Mode cross site scripting
vuldb·2026-08-21·CVSS 6.1
CVE-2023-5758 [MEDIUM] Mozilla Firefox up to 118 on iOS Reader Mode cross site scripting
A vulnerability identified as problematic has been detected in Mozilla Firefox up to 118 on iOS. This vulnerability affects unknown code of the component Reader Mode. This manipulation causes cross site scripting.
This vulnerability is handled as CVE-2023-5758. The attack can be initiated remotely. There is not any exploit available.
You should upgrade the affected component.
GHSA
GHSA-fpp8-6gxj-v3pg: When opening a page in reader mode, the redirect URL could have caused attacker-controlled script to execute in a reflected Cross-Site Scripting (XSS)
ghsa_unreviewed·2023-10-25
CVE-2023-5758 [MEDIUM] CWE-79 GHSA-fpp8-6gxj-v3pg: When opening a page in reader mode, the redirect URL could have caused attacker-controlled script to execute in a reflected Cross-Site Scripting (XSS)
When opening a page in reader mode, the redirect URL could have caused attacker-controlled script to execute in a reflected Cross-Site Scripting (XSS) attack. This vulnerability affects Firefox for iOS < 119.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
https://bugzilla.mozilla.org/show_bug.cgi?id=1850019https://security.gentoo.org/glsa/202401-10https://www.mozilla.org/security/advisories/mfsa2023-48/https://bugzilla.mozilla.org/show_bug.cgi?id=1850019https://security.gentoo.org/glsa/202401-10https://www.mozilla.org/security/advisories/mfsa2023-48/
2023-10-25
Published