CVE-2023-4053

Description

A website could have obscured the full screen notification by using a URL with a scheme handled by an external program, such as a mailto URL. This could have led to user confusion and possible spoofing attacks. This vulnerability affects Firefox < 116, Firefox ESR < 115.2, and Thunderbird < 115.2.

Reserved 2023-08-01 | Published 2023-08-01 | Updated 2024-10-22 | Assigner mozilla

Problem types

Full screen notification obscured by external program

Product status

Any version before 116
affected

Any version before 115.2
affected

Any version before 115.2
affected

Credits

Umar Farooq

References

bugzilla.mozilla.org/show_bug.cgi?id=1839079

www.mozilla.org/security/advisories/mfsa2023-29/

www.mozilla.org/security/advisories/mfsa2023-36/

www.mozilla.org/security/advisories/mfsa2023-38/

cve.org (CVE-2023-4053)

nvd.nist.gov (CVE-2023-4053)

Download JSON