CVE-2023-23603
CVSS 3.1 Score 6.5 of 10 (medium)
Details
Published Jun 2, 2023
Updated: Jan 10, 2025
CWE ID 770
Summary
CVE-2023-23603 is a vulnerability affecting Firefox versions below 109, Thunderbird below 102.7, and Firefox ESR below 102.7. The issue lies in the way regular expressions are used to filter out forbidden properties and values from style directives in console.log calls. This weakness does not account for external URLs, which can be exploited to potentially exfiltrate data from the browser through this function.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.