CVE-2023-6867

CVSS 3.1 Score 6.1 of 10 (medium)

Details

Published Dec 19, 2023
Updated: Feb 2, 2024
CWE ID 1021

Summary

CVE-2023-6867 is a cyber vulnerability that affects Firefox ESR versions prior to 115.6 and Firefox versions prior to 121. It is classified as a medium severity vulnerability and has a base score of 6.1 according to NVD@nist.gov. The vulnerability allows an attacker to surprise users by luring them to click where the permission grant button would be about to appear, due to the timing of a button click causing a popup to disappear being approximately the same length as the anti-clickjacking delay on permission prompts. The exploit requires network access and user interaction, but no privileges are required. The impact on integrity and confidentiality is low, and there is no availability impact. Remediation for this vulnerability involves updating Firefox ESR to version 115.6 or later, or updating Firefox to version 121 or later.

Explore Beyond the CVE Basics with Recorded Future's Vulnerability Intelligence

Note: This is just a basic overview providing quick insights into CVE-2023-6867 information. Gain full access to comprehensive CVE data, risk scores, prioritization, and mitigation data through Recorded Future's Vulnerability Intelligence:
  • Prioritize with Risk-Based Scoring
  • Explore the Extensive Vulnerability Database
  • Receive Early Alerts on Emerging CVEs
  • Focus on Critical Exploitable Vulnerabilities
  • Streamline Remediation with Integration Options