CVE-2023-23602
CVSS 3.1 Score 6.5 of 10 (medium)
Details
Published Jun 2, 2023
Updated: Jan 10, 2025
CWE ID 754
Summary
CVE-2023-23602 is a vulnerability affecting Firefox versions 109 and below, Thunderbird versions 102.7 and below, and Firefox ESR versions 102.7 and below. It arises due to an incorrectly managed security check during the creation of a WebSocket in a WebWorker. Consequently, the Content Security Policy's connect-src header is disregarded. This oversight could allow connections to restricted origins from within WebWorkers.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.