CVE-2023-4045

Summary

CVE-2023-4045 is a cyber vulnerability that affects Firefox versions prior to 116, Firefox ESR versions prior to 102.14, and Firefox ESR versions prior to 115.1. This vulnerability in Offscreen Canvas allows unauthorized access to image data from another site, bypassing the same-origin policy. The risk score for this vulnerability is 47 out of 100, indicating a medium severity level. The exploitability score is 3.9 out of 10, and the impact score is 1.4 out of 10. The base severity level is medium, with low confidentiality impact and no integrity impact or availability impact. No privileges are required for exploitation, and there is no user interaction required either. The attack vector is through the network, and the attack complexity is low. Organizations using affected versions of Firefox should update to the latest patched version to remediate this vulnerability in order to prevent unauthorized access to image data from other sites and potential security breaches.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.