CVE-2023-6210 (published 2023-11-21T14:28:54.144Z)
When an https: web page created a pop-up from a "javascript:" URL, that pop-up was incorrectly allowed to load blockable content such as iframes from insecure http: URLs This vulnerability affects Firefox < 120.
Affected products: Vendor: Mozilla
Product: Firefox
Versions: unspecified