CVE-2023-6209 (published 2023-11-21T14:28:53.787Z)
Relative URLs starting with three slashes were incorrectly parsed, and a path-traversal "/../" part in the path could be used to override the specified host. This could contribute to security problems in web sites. This vulnerability affects Firefox < 120, Firefox ESR < 115.5.0, and Thunderbird < 115.5.
Affected products: Vendor: Mozilla
Product: Firefox
Versions: unspecified