deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2023-46563
Published: 2023-10-25
Description: TOTOLINK X2000R Gh v1.0.0-B20[PII_REDACTED].web was discovered to contain a stack overflow via the function formIpQoS.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787, CWE-121
References: https://github.com/XYIYM/Digging/blob/main/TOTOLINK/X2000R/7/1.md; https://totolink.cn/home/menu/detail.html?menu_listtpl=download&id=85&ids=36; https://github.com/XYIYM/Digging/blob/main/TOTOLINK/X2000R/7/1.md
CVE: CVE-2023-46564
Published: 2023-10-25
Description: TOTOLINK X2000R Gh v1.0.0-B20[PII_REDACTED].web was discovered to contain a stack overflow via the function formDMZ.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787, CWE-121
References: https://github.com/XYIYM/Digging/blob/main/TOTOLINK/X2000R/6/1.md; https://totolink.cn/home/menu/detail.html?menu_listtpl=download&id=85&ids=36; https://github.com/XYIYM/Digging/blob/main/TOTOLINK/X2000R/6/1.md
CVE: CVE-2023-46574
Published: 2023-10-25
Description: An issue in TOTOLINK A3700R v.9.1.2u.6165_20211012 allows a remote attacker to execute arbitrary code via the FileName parameter of the UploadFirmwareFile function.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-77
References: https://github.com/OraclePi/repo/blob/main/totolink%20A3700R/1/A3700R%20%20V9.1.2u.6165_20211012%20vuln.md; https://github.com/OraclePi/repo/blob/main/totolink%20A3700R/1/A3700R%20%20V9.1.2u.6165_20211012%20vuln.md
CVE: CVE-2023-46650
Published: 2023-10-25
Description: Jenkins GitHub Plugin 1.37.3 and earlier does not escape the GitHub project URL on the build page when showing changes, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Item/Configure permission.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://www.openwall.com/lists/oss-security/2023/10/25/2; https://www.jenkins.io/security/advisory/2023-10-25/#SECURITY-3246; http://www.openwall.com/lists/oss-security/2023/10/25/2
CVE: CVE-2023-46651
Published: 2023-10-25
Description: Jenkins Warnings Plugin 10.5.0 and earlier does not set the appropriate context for credentials lookup, allowing attackers with Item/Configure permission to access and capture credentials they are not entitled to. This fix has been backported to 10.4.1.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-522
References: http://www.openwall.com/lists/oss-security/2023/10/25/2; https://www.jenkins.io/security/advisory/2023-10-25/#SECURITY-3265; http://www.openwall.com/lists/oss-security/2023/10/25/2
CVE: CVE-2023-46652
Published: 2023-10-25
Description: A missing permission check in Jenkins lambdatest-automation Plugin 1.20.9 and earlier allows attackers with Overall/Read permission to enumerate credentials IDs of LAMBDATEST credentials stored in Jenkins.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-862
References: http://www.openwall.com/lists/oss-security/2023/10/25/2; https://www.jenkins.io/security/advisory/2023-10-25/#SECURITY-3222; http://www.openwall.com/lists/oss-security/2023/10/25/2
CVE: CVE-2023-46653
Published: 2023-10-25
Description: Jenkins lambdatest-automation Plugin 1.20.10 and earlier logs LAMBDATEST Credentials access token at the INFO level, potentially resulting in its exposure.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-312
References: http://www.openwall.com/lists/oss-security/2023/10/25/2; https://www.jenkins.io/security/advisory/2023-10-25/#SECURITY-3202; http://www.openwall.com/lists/oss-security/2023/10/25/2
CVE: CVE-2023-46654
Published: 2023-10-25
Description: Jenkins CloudBees CD Plugin 1.1.32 and earlier follows symbolic links to locations outside of the expected directory during the cleanup process of the 'CloudBees CD - Publish Artifact' post-build step, allowing attackers able to configure jobs to delete arbitrary files on the Jenkins controller file system.
CVSS Score: 8.1 (HIGH)
CWE: CWE-59
References: http://www.openwall.com/lists/oss-security/2023/10/25/2; https://www.jenkins.io/security/advisory/2023-10-25/#SECURITY-3237; http://www.openwall.com/lists/oss-security/2023/10/25/2
CVE: CVE-2023-46655
Published: 2023-10-25
Description: Jenkins CloudBees CD Plugin 1.1.32 and earlier follows symbolic links to locations outside of the directory from which artifacts are published during the 'CloudBees CD - Publish Artifact' post-build step, allowing attackers able to configure jobs to publish arbitrary files from the Jenkins controller file system to the previously configured CloudBees CD server.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-59
References: http://www.openwall.com/lists/oss-security/2023/10/25/2; https://www.jenkins.io/security/advisory/2023-10-25/#SECURITY-3238; http://www.openwall.com/lists/oss-security/2023/10/25/2
CVE: CVE-2023-46656
Published: 2023-10-25
Description: Jenkins Multibranch Scan Webhook Trigger Plugin 1.0.9 and earlier uses a non-constant time comparison function when checking whether the provided and expected webhook token are equal, potentially allowing attackers to use statistical methods to obtain a valid webhook token.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-697
References: http://www.openwall.com/lists/oss-security/2023/10/25/2; https://www.jenkins.io/security/advisory/2023-10-25/#SECURITY-2875; http://www.openwall.com/lists/oss-security/2023/10/25/2
CVE: CVE-2023-46657
Published: 2023-10-25
Description: Jenkins Gogs Plugin 1.0.15 and earlier uses a non-constant time comparison function when checking whether the provided and expected webhook token are equal, potentially allowing attackers to use statistical methods to obtain a valid webhook token.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-697
References: http://www.openwall.com/lists/oss-security/2023/10/25/2; https://www.jenkins.io/security/advisory/2023-10-25/#SECURITY-2896; http://www.openwall.com/lists/oss-security/2023/10/25/2
CVE: CVE-2023-46658
Published: 2023-10-25
Description: Jenkins MSTeams Webhook Trigger Plugin 0.1.1 and earlier uses a non-constant time comparison function when checking whether the provided and expected webhook token are equal, potentially allowing attackers to use statistical methods to obtain a valid webhook token.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-697
References: http://www.openwall.com/lists/oss-security/2023/10/25/2; https://www.jenkins.io/security/advisory/2023-10-25/#SECURITY-2876; http://www.openwall.com/lists/oss-security/2023/10/25/2
CVE: CVE-2023-46659
Published: 2023-10-25
Description: Jenkins Edgewall Trac Plugin 1.13 and earlier does not escape the Trac website URL on the build page, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Item/Configure permission.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://www.openwall.com/lists/oss-security/2023/10/25/2; https://www.jenkins.io/security/advisory/2023-10-25/#SECURITY-3247; http://www.openwall.com/lists/oss-security/2023/10/25/2
CVE: CVE-2023-46660
Published: 2023-10-25
Description: Jenkins Zanata Plugin 0.6 and earlier uses a non-constant time comparison function when checking whether the provided and expected webhook token hashes are equal, potentially allowing attackers to use statistical methods to obtain a valid webhook token.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-697
References: http://www.openwall.com/lists/oss-security/2023/10/25/2; https://www.jenkins.io/security/advisory/2023-10-25/#SECURITY-2879; http://www.openwall.com/lists/oss-security/2023/10/25/2
CVE: CVE-2023-4606
Published: 2023-10-25
Description: An authenticated XCC user with Read-Only permission can change a different user’s password through a crafted API command.  

This affects ThinkSystem v2 and v3 servers with XCC; ThinkSystem v1 servers are not affected.
CVSS Score: 8.1 (HIGH)
CWE: CWE-862, CWE-862
References: https://support.lenovo.com/us/en/product_security/LEN-140960; https://support.lenovo.com/us/en/product_security/LEN-140960
CVE: CVE-2023-4607
Published: 2023-10-25
Description: An authenticated XCC user can change permissions for any user through a crafted API command.
CVSS Score: 7.5 (HIGH)
CWE: CWE-269
References: https://support.lenovo.com/us/en/product_security/LEN-140960; https://support.lenovo.com/us/en/product_security/LEN-140960
CVE: CVE-2023-4608
Published: 2023-10-25
Description: An authenticated XCC user with elevated privileges can perform blind SQL injection in limited cases through a crafted API command. 

This affects ThinkSystem v2 and v3 servers with XCC; ThinkSystem v1 servers are not affected.
CVSS Score: 4.1 (MEDIUM)
CWE: CWE-89
References: https://support.lenovo.com/us/en/product_security/LEN-140960; https://support.lenovo.com/us/en/product_security/LEN-140960
CVE: CVE-2023-4692
Published: 2023-10-25
Description: An out-of-bounds write flaw was found in grub2's NTFS filesystem driver. This issue may allow an attacker to present a specially crafted NTFS filesystem image, leading to grub's heap metadata corruption. In some circumstances, the attack may also corrupt the UEFI firmware heap metadata. As a result, arbitrary code execution and secure boot protection bypass may be achieved.
CVSS Score: 7.5 (HIGH)
CWE: CWE-122, CWE-787
References: https://access.redhat.com/errata/RHSA-2024:2456; https://access.redhat.com/errata/RHSA-2024:3184; https://access.redhat.com/security/cve/CVE-2023-4692
CVE: CVE-2023-4693
Published: 2023-10-25
Description: An out-of-bounds read flaw was found on grub2's NTFS filesystem driver. This issue may allow a physically present attacker to present a specially crafted NTFS file system image to read arbitrary memory locations. A successful attack allows sensitive data cached in memory or EFI variable values to be leaked, presenting a high Confidentiality risk.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-125, CWE-125
References: https://access.redhat.com/errata/RHSA-2024:2456; https://access.redhat.com/errata/RHSA-2024:3184; https://access.redhat.com/security/cve/CVE-2023-4693
CVE: CVE-2023-5085
Published: 2023-10-25
Description: The Advanced Menu Widget plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'advMenu' shortcode in versions up to, and including, 0.4.1 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers with contributor-level and above permissions to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://plugins.trac.wordpress.org/browser/advanced-menu-widget/trunk/class-advanced-menu-widget.php?rev=1471917#L74; https://www.wordfence.com/threat-intel/vulnerabilities/id/5da2dac6-940c-419e-853f-6cfd5d53d427?source=cve; https://plugins.trac.wordpress.org/browser/advanced-menu-widget/trunk/class-advanced-menu-widget.php?rev=1471917#L74
CVE: CVE-2023-5110
Published: 2023-10-25
Description: The BSK PDF Manager plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'bsk-pdfm-category-dropdown' shortcode in versions up to, and including, 3.4.1 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers with contributor-level and above permissions to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://plugins.trac.wordpress.org/browser/bsk-pdf-manager/trunk/classes/shortcodes/category/category-dropdown.php?rev=2885460#L36; https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=2985503%40bsk-pdf-manager&new=2985503%40bsk-pdf-manager&sfp_email=&sfph_mail=; https://www.wordfence.com/threat-intel/vulnerabilities/id/60de55c6-e4fa-453e-84bd-309f2887e3cb?source=cve
CVE: CVE-2023-5126
Published: 2023-10-25
Description: The Delete Me plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'plugin_delete_me' shortcode in versions up to, and including, 3.0 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers with contributor-level and above permissions to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. The shortcode is not displayed to administrators, so it cannot be used against administrator users.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://plugins.trac.wordpress.org/browser/delete-me/tags/3.0/inc/shortcode.php#L83; https://plugins.trac.wordpress.org/changeset/2994298/delete-me#file2; https://www.wordfence.com/threat-intel/vulnerabilities/id/7a5123a7-8eb4-481e-88fe-6310be37a077?source=cve
CVE: CVE-2023-5127
Published: 2023-10-25
Description: The WP Font Awesome plugin for WordPress is vulnerable to Stored Cross-Site Scripting via shortcodes in versions up to, and including, 1.7.9 due to insufficient input sanitization and output escaping on 'icon' user supplied attribute. This makes it possible for authenticated attackers with contributor-level and above permissions to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://plugins.trac.wordpress.org/browser/wp-font-awesome/trunk/wp-font-awesome.php?rev=2875119#L101; https://plugins.trac.wordpress.org/browser/wp-font-awesome/trunk/wp-font-awesome.php?rev=2875119#L53; https://plugins.trac.wordpress.org/browser/wp-font-awesome/trunk/wp-font-awesome.php?rev=2875119#L55
CVE: CVE-2023-5311
Published: 2023-10-25
Description: The WP EXtra plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the register() function in versions up to, and including, 6.2. This makes it possible for authenticated attackers, with subscriber-level permissions and above, to modify the contents of the .htaccess files located in a site's root directory or /wp-content and /wp-includes folders and achieve remote code execution. CVE-2023-46623 appears to be a duplicate of this issue.
CVSS Score: 8.8 (HIGH)
CWE: CWE-862, CWE-862
References: https://giongfnef.gitbook.io/giongfnef/cve/cve-2023-5311; https://plugins.trac.wordpress.org/changeset/2977703/wp-extra; https://www.wordfence.com/threat-intel/vulnerabilities/id/87e3dd5e-0d77-4d78-8171-0beaf9482699?source=cve
CVE: CVE-2023-5363
Published: 2023-10-25
Description: Issue summary: A bug has been identified in the processing of key and
initialisation vector (IV) lengths.  This can lead to potential truncation
or overruns during the initialisation of some symmetric ciphers.

Impact summary: A truncation in the IV can result in non-uniqueness,
which could result in loss of confidentiality for some cipher modes.

When calling EVP_EncryptInit_ex2(), EVP_DecryptInit_ex2() or
EVP_CipherInit_ex2() the provided OSSL_PARAM array is processed after
the key and IV have been established.  Any alterations to the key length,
via the "keylen" parameter or the IV length, via the "ivlen" parameter,
within the OSSL_PARAM array will not take effect as intended, potentially
causing truncation or overreading of these values.  The following ciphers
and cipher modes are impacted: RC2, RC4, RC5, CCM, GCM and OCB.

For the CCM, GCM and OCB cipher modes, truncation of the IV can result in
loss of confidentiality.  For example, when following NIST's SP 800-38D
section 8.2.1 guidance for constructing a deterministic IV for AES in
GCM mode, truncation of the counter portion could lead to IV reuse.

Both truncations and overruns of the key and overruns of the IV will
produce incorrect results and could, in some cases, trigger a memory
exception.  However, these issues are not currently assessed as security
critical.

Changing the key and/or IV lengths is not considered to be a common operation
and the vulnerable API was recently introduced. Furthermore it is likely that
application developers will have spotted this problem during testing since
decryption would fail unless both peers in the communication were similarly
vulnerable. For these reasons we expect the probability of an application being
vulnerable to this to be quite low. However if an application is vulnerable then
this issue is considered very serious. For these reasons we have assessed this
issue as Moderate severity overall.

The OpenSSL SSL/TLS implementation is not affected by this issue.

The OpenSSL 3.0 and 3.1 FIPS providers are not affected by this because
the issue lies outside of the FIPS provider boundary.

OpenSSL 3.1 and 3.0 are vulnerable to this issue.
CVSS Score: 7.5 (HIGH)
CWE: CWE-684
References: https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=0df40630850fb2740e6be6890bb905d3fc623b2d; https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=5f69f5c65e483928c4b28ed16af6e5742929f1ee; https://www.openssl.org/news/secadv/20231024.txt
CVE: CVE-2023-5472
Published: 2023-10-25
Description: Use after free in Profiles in Google Chrome prior to 118.0.5993.117 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
CVSS Score: 8.8 (HIGH)
CWE: CWE-416, CWE-416
References: https://chromereleases.googleblog.com/2023/10/stable-channel-update-for-desktop_24.html; https://crbug.com/1491296; https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/5TWIUD4VIISLZWEQ4WLWFZT34T3KOXZB/
CVE: CVE-2023-5568
Published: 2023-10-25
Description: A heap-based Buffer Overflow flaw was discovered in Samba. It could allow a remote, authenticated attacker to exploit this vulnerability to cause a denial of service.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-122, CWE-787
References: https://access.redhat.com/security/cve/CVE-2023-5568; https://bugzilla.redhat.com/show_bug.cgi?id=2245174; https://bugzilla.samba.org/show_bug.cgi?id=15491
CVE: CVE-2023-5671
Published: 2023-10-25
Description: HP Print and Scan Doctor for Windows may potentially be vulnerable to escalation of privilege. HP is releasing software updates to mitigate the potential vulnerability.
CVSS Score: 7.8 (HIGH)
CWE: CWE-269
References: https://support.hp.com/us-en/document/ish_9[PII_REDACTED]704-16; https://support.hp.com/us-en/document/ish_9[PII_REDACTED]704-16
CVE: CVE-2023-5717
Published: 2023-10-25
Description: A heap out-of-bounds write vulnerability in the Linux kernel's Linux Kernel Performance Events (perf) component can be exploited to achieve local privilege escalation.

If perf_read_group() is called while an event's sibling_list is smaller than its child's sibling_list, it can increment or write to memory locations outside of the allocated buffer.

We recommend upgrading past commit 32671e3799ca2e4590773fd0e63aaa4229e50c06.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787, CWE-787
References: https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/kernel/events?id=32671e3799ca2e4590773fd0e63aaa4229e50c06; https://kernel.dance/32671e3799ca2e4590773fd0e63aaa4229e50c06; https://lists.debian.org/debian-lts-announce/2024/01/msg00004.html
CVE: CVE-2023-5721
Published: 2023-10-25
Description: It was possible for certain browser prompts and dialogs to be activated or dismissed unintentionally by the user due to an insufficient activation-delay. This vulnerability affects Firefox < 119, Firefox ESR < 115.4, and Thunderbird < 115.4.1.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-1021
References: https://bugzilla.mozilla.org/show_bug.cgi?id=1830820; https://lists.debian.org/debian-lts-announce/2023/10/msg00037.html; https://lists.debian.org/debian-lts-announce/2023/10/msg00042.html
CVE: CVE-2023-5722
Published: 2023-10-25
Description: Using iterative requests an attacker was able to learn the size of an opaque response, as well as the contents of a server-supplied Vary header. This vulnerability affects Firefox < 119.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-203
References: https://bugzilla.mozilla.org/show_bug.cgi?id=1738426; https://security.gentoo.org/glsa/202401-10; https://www.mozilla.org/security/advisories/mfsa2023-45/
CVE: CVE-2023-5723
Published: 2023-10-25
Description: An attacker with temporary script access to a site could have set a cookie containing invalid characters using `document.cookie` that could have led to unknown errors. This vulnerability affects Firefox < 119.
CVSS Score: 5.3 (MEDIUM)
References: https://bugzilla.mozilla.org/show_bug.cgi?id=1802057; https://security.gentoo.org/glsa/202401-10; https://www.mozilla.org/security/advisories/mfsa2023-45/
CVE: CVE-2023-5724
Published: 2023-10-25
Description: Drivers are not always robust to extremely large draw calls and in some cases this scenario could have led to a crash. This vulnerability affects Firefox < 119, Firefox ESR < 115.4, and Thunderbird < 115.4.1.
CVSS Score: 7.5 (HIGH)
CWE: CWE-400
References: https://bugzilla.mozilla.org/show_bug.cgi?id=1836705; https://lists.debian.org/debian-lts-announce/2023/10/msg00037.html; https://lists.debian.org/debian-lts-announce/2023/10/msg00042.html
CVE: CVE-2023-5725
Published: 2023-10-25
Description: A malicious installed WebExtension could open arbitrary URLs, which under the right circumstance could be leveraged to collect sensitive user data. This vulnerability affects Firefox < 119, Firefox ESR < 115.4, and Thunderbird < 115.4.1.
CVSS Score: 4.3 (MEDIUM)
References: https://bugzilla.mozilla.org/show_bug.cgi?id=1845739; https://lists.debian.org/debian-lts-announce/2023/10/msg00037.html; https://lists.debian.org/debian-lts-announce/2023/10/msg00042.html
CVE: CVE-2023-5726
Published: 2023-10-25
Description: A website could have obscured the full screen notification by using the file open dialog. This could have led to user confusion and possible spoofing attacks. 
*Note: This issue only affected macOS operating systems. Other operating systems are unaffected.* This vulnerability affects Firefox < 119, Firefox ESR < 115.4, and Thunderbird < 115.4.1.
CVSS Score: 4.3 (MEDIUM)
References: https://bugzilla.mozilla.org/show_bug.cgi?id=1846205; https://www.mozilla.org/security/advisories/mfsa2023-45/; https://www.mozilla.org/security/advisories/mfsa2023-46/
CVE: CVE-2023-5727
Published: 2023-10-25
Description: The executable file warning was not presented when downloading .msix, .msixbundle, .appx, and .appxbundle files, which can run commands on a user's computer.  
*Note: This issue only affected Windows operating systems. Other operating systems are unaffected.* This vulnerability affects Firefox < 119, Firefox ESR < 115.4, and Thunderbird < 115.4.1.
CVSS Score: 6.5 (MEDIUM)
References: https://bugzilla.mozilla.org/show_bug.cgi?id=1847180; https://www.mozilla.org/security/advisories/mfsa2023-45/; https://www.mozilla.org/security/advisories/mfsa2023-46/
CVE: CVE-2023-5728
Published: 2023-10-25
Description: During garbage collection extra operations were performed on a object that should not be. This could have led to a potentially exploitable crash. This vulnerability affects Firefox < 119, Firefox ESR < 115.4, and Thunderbird < 115.4.1.
CVSS Score: 7.5 (HIGH)
CWE: CWE-416
References: https://bugzilla.mozilla.org/show_bug.cgi?id=1852729; https://lists.debian.org/debian-lts-announce/2023/10/msg00037.html; https://lists.debian.org/debian-lts-announce/2023/10/msg00042.html
CVE: CVE-2023-5729
Published: 2023-10-25
Description: A malicious web site can enter fullscreen mode while simultaneously triggering a WebAuthn prompt. This could have obscured the fullscreen notification and could have been leveraged in a spoofing attack. This vulnerability affects Firefox < 119.
CVSS Score: 4.3 (MEDIUM)
References: https://bugzilla.mozilla.org/show_bug.cgi?id=1823720; https://security.gentoo.org/glsa/202401-10; https://www.mozilla.org/security/advisories/mfsa2023-45/
CVE: CVE-2023-5730
Published: 2023-10-25
Description: Memory safety bugs present in Firefox 118, Firefox ESR 115.3, and Thunderbird 115.3. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 119, Firefox ESR < 115.4, and Thunderbird < 115.4.1.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: https://bugzilla.mozilla.org/buglist.cgi?bug_id=1836607%2C1840918%2C1848694%2C1848833%2C1850191%2C1850259%2C1852596%2C1853201%2C1854002%2C1855306%2C1855640%2C1856695; https://lists.debian.org/debian-lts-announce/2023/10/msg00037.html; https://lists.debian.org/debian-lts-announce/2023/10/msg00042.html