CVE-2023-4045

CVSS 3.1 Score 5.3 of 10 (medium)

Details

Published Aug 1, 2023
Updated: Aug 9, 2023
CWE ID 346

Summary

CVE-2023-4045 is a cyber vulnerability that affects Firefox versions prior to 116, Firefox ESR versions prior to 102.14, and Firefox ESR versions prior to 115.1. This vulnerability in Offscreen Canvas allows unauthorized access to image data from another site, bypassing the same-origin policy. The risk score for this vulnerability is 47 out of 100, indicating a medium severity level. The exploitability score is 3.9 out of 10, and the impact score is 1.4 out of 10. The base severity level is medium, with low confidentiality impact and no integrity impact or availability impact. No privileges are required for exploitation, and there is no user interaction required either. The attack vector is through the network, and the attack complexity is low. Organizations using affected versions of Firefox should update to the latest patched version to remediate this vulnerability in order to prevent unauthorized access to image data from other sites and potential security breaches.

Share

Explore Beyond the CVE Basics with Recorded Future's Vulnerability Intelligence

Note: This is just a basic overview providing quick insights into CVE-2023-4045 information. Gain full access to comprehensive CVE data, risk scores, prioritization, and mitigation data through Recorded Future's Vulnerability Intelligence:
  • Prioritize with Risk-Based Scoring
  • Explore the Extensive Vulnerability Database
  • Receive Early Alerts on Emerging CVEs
  • Focus on Critical Exploitable Vulnerabilities
  • Streamline Remediation with Integration Options