USN-6143-1

Dashboard / Vulnerabilities / USN-6143-1

USN-6143-1

Summary: firefox vulnerabilities

Details: Multiple security issues were discovered in Firefox. If a user were tricked into opening a specially crafted website, an attacker could potentially exploit these to cause a denial of service, obtain sensitive information across domains, or execute arbitrary code. (CVE-2023-34414, CVE-2023-34416, CVE-2023-34417) Jun Kokatsu discovered that Firefox did not properly validate site-isolated process for a document loaded from a data: URL that was the result of a redirect, leading to an open redirect attack. An attacker could possibly use this issue to perform phishing attacks. (CVE-2023-34415)

References: https://ubuntu.com/security/notices/USN-6143-1, https://ubuntu.com/security/CVE-2023-34414, https://ubuntu.com/security/CVE-2023-34415, https://ubuntu.com/security/CVE-2023-34416, https://ubuntu.com/security/CVE-2023-34417