CVE-2023-5725 (published 2023-10-24T12:47:11.631Z)
A malicious installed WebExtension could open arbitrary URLs, which under the right circumstance could be leveraged to collect sensitive user data. This vulnerability affects Firefox < 119, Firefox ESR < 115.4, and Thunderbird < 115.4.1.
Affected products: Vendor: Mozilla
Product: Firefox
Versions: unspecified