CVE-2023-23601
Assigner: mozilla
Published: 2023-06-02T00:00:00
State: PUBLISHED
descriptions: value: Navigations were being allowed when dragging a URL from a cross-origin iframe into the same tab which could lead to website spoofing attacks. This vulnerability affects Firefox < 109, Thunderbird < 102.7, and Firefox ESR < 102.7.
affected: vendor: Mozilla
product: Firefox
versions: version: unspecified
lessThan: 109
status: affected
versionType: custom
vendor: Mozilla
product: Thunderbird
versions: version: unspecified
lessThan: 102.7
status: affected
versionType: custom
vendor: Mozilla
product: Firefox ESR
versions: version: unspecified
lessThan: 102.7
status: affected
versionType: custom
problemTypes: descriptions: type: text
description: URL being dragged from cross-origin iframe into same tab triggers navigation