CVE-2023-25750 :: Enginsight Vulnerability Database

Provider	Type	Base Score	Atk. Vector	Atk. Complexity	Priv. Required	Vector
NIST	Primary	4.3 MEDIUM	NETWORK	LOW	NONE	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N

Base Score

CVSS 3.x

EPSS Score

Percentile: 31%

Affected Products (NVD)

Vendor	Product	Version
mozilla	firefox	𝑥 < 111.0

𝑥

= Vulnerable software versions

Debian Releases

Debian Product

Codename

firefox

sid	133.0.3-1 fixed

Ubuntu Releases

Ubuntu Product

Codename

firefox

bionic	Fixed 111.0+build2-0ubuntu0.18.04.1 released
focal	Fixed 111.0+build2-0ubuntu0.20.04.1 released
jammy	not-affected
kinetic	not-affected
lunar	not-affected
mantic	not-affected
noble	not-affected
trusty	ignored
xenial	ignored

mozjs38

bionic	ignored
focal	dne
jammy	dne
kinetic	dne
trusty	dne
xenial	dne

mozjs52

bionic	ignored
focal	ignored
jammy	dne
kinetic	dne
trusty	dne
xenial	dne

mozjs68

bionic	dne
focal	ignored
jammy	dne
kinetic	dne
trusty	dne
xenial	dne

mozjs78

bionic	dne
focal	dne
jammy	ignored
kinetic	ignored
lunar	ignored
mantic	dne
noble	dne
trusty	dne
xenial	dne

mozjs91

bionic	dne
focal	dne
jammy	ignored
kinetic	dne
trusty	dne
xenial	dne

thunderbird

bionic	ignored
focal	not-affected
jammy	not-affected
kinetic	ignored
lunar	not-affected
mantic	not-affected
noble	not-affected
trusty	ignored
xenial	ignored

openSUSE / SLES Releases

openSUSE Product

Release

MozillaFirefox

suse enterprise desktop 15 SP4	102.9.0-150200.152.81.1 fixed
suse enterprise desktop 15 SP5	102.9.0-150200.152.81.1 fixed
suse enterprise desktop 15 SP6	102.9.0-150200.152.81.1 fixed
suse enterprise desktop 15 SP7	102.9.0-150200.152.81.1 fixed
suse enterprise sap 12 SP5	102.9.0-112.153.1 fixed
suse enterprise sap 15 SP2	102.9.0-150200.152.81.1 fixed
suse enterprise sap 15 SP3	102.9.0-150200.152.81.1 fixed
suse enterprise sap 15 SP4	102.9.0-150200.152.81.1 fixed
suse enterprise sap 15 SP5	102.9.0-150200.152.81.1 fixed
suse enterprise sap 15 SP6	102.9.0-150200.152.81.1 fixed
suse enterprise sap 15 SP7	102.9.0-150200.152.81.1 fixed
suse enterprise server 12 SP2	102.9.0-112.153.1 fixed
suse enterprise server 12 SP3	102.9.0-112.153.1 fixed
suse enterprise server 12 SP4	102.9.0-112.153.1 fixed
suse enterprise server 12 SP5	102.9.0-112.153.1 fixed
suse enterprise server 15 SP1	102.9.0-150000.150.79.1 fixed
suse enterprise server 15 SP2	102.9.0-150200.152.81.1 fixed
suse enterprise server 15 SP3	102.9.0-150200.152.81.1 fixed
suse enterprise server 15 SP4	102.9.0-150200.152.81.1 fixed
suse enterprise server 15 SP5	102.9.0-150200.152.81.1 fixed
suse enterprise server 15 SP6	102.9.0-150200.152.81.1 fixed
suse enterprise server 15 SP7	102.9.0-150200.152.81.1 fixed

MozillaFirefox-devel

suse enterprise desktop 15 SP4	102.9.0-150200.152.81.1 fixed
suse enterprise desktop 15 SP5	102.9.0-150200.152.81.1 fixed
suse enterprise desktop 15 SP6	102.9.0-150200.152.81.1 fixed
suse enterprise desktop 15 SP7	102.9.0-150200.152.81.1 fixed
suse enterprise sap 12 SP5	102.9.0-112.153.1 fixed
suse enterprise sap 15 SP2	102.9.0-150200.152.81.1 fixed
suse enterprise sap 15 SP3	102.9.0-150200.152.81.1 fixed
suse enterprise sap 15 SP4	102.9.0-150200.152.81.1 fixed
suse enterprise sap 15 SP5	102.9.0-150200.152.81.1 fixed
suse enterprise sap 15 SP6	102.9.0-150200.152.81.1 fixed
suse enterprise sap 15 SP7	102.9.0-150200.152.81.1 fixed
suse enterprise server 12 SP2	102.9.0-112.153.1 fixed
suse enterprise server 12 SP3	102.9.0-112.153.1 fixed
suse enterprise server 12 SP4	102.9.0-112.153.1 fixed
suse enterprise server 12 SP5	102.9.0-112.153.1 fixed
suse enterprise server 15 SP1	102.9.0-150000.150.79.1 fixed
suse enterprise server 15 SP2	102.9.0-150200.152.81.1 fixed
suse enterprise server 15 SP3	102.9.0-150200.152.81.1 fixed
suse enterprise server 15 SP4	102.9.0-150200.152.81.1 fixed
suse enterprise server 15 SP5	102.9.0-150200.152.81.1 fixed
suse enterprise server 15 SP6	102.9.0-150200.152.81.1 fixed
suse enterprise server 15 SP7	102.9.0-150200.152.81.1 fixed

MozillaFirefox-translations-common

suse enterprise desktop 15 SP4	102.9.0-150200.152.81.1 fixed
suse enterprise desktop 15 SP5	102.9.0-150200.152.81.1 fixed
suse enterprise desktop 15 SP6	102.9.0-150200.152.81.1 fixed
suse enterprise desktop 15 SP7	102.9.0-150200.152.81.1 fixed
suse enterprise sap 12 SP5	102.9.0-112.153.1 fixed
suse enterprise sap 15 SP2	102.9.0-150200.152.81.1 fixed
suse enterprise sap 15 SP3	102.9.0-150200.152.81.1 fixed
suse enterprise sap 15 SP4	102.9.0-150200.152.81.1 fixed
suse enterprise sap 15 SP5	102.9.0-150200.152.81.1 fixed
suse enterprise sap 15 SP6	102.9.0-150200.152.81.1 fixed
suse enterprise sap 15 SP7	102.9.0-150200.152.81.1 fixed
suse enterprise server 12 SP2	102.9.0-112.153.1 fixed
suse enterprise server 12 SP3	102.9.0-112.153.1 fixed
suse enterprise server 12 SP4	102.9.0-112.153.1 fixed
suse enterprise server 12 SP5	102.9.0-112.153.1 fixed
suse enterprise server 15 SP1	102.9.0-150000.150.79.1 fixed
suse enterprise server 15 SP2	102.9.0-150200.152.81.1 fixed
suse enterprise server 15 SP3	102.9.0-150200.152.81.1 fixed
suse enterprise server 15 SP4	102.9.0-150200.152.81.1 fixed
suse enterprise server 15 SP5	102.9.0-150200.152.81.1 fixed
suse enterprise server 15 SP6	102.9.0-150200.152.81.1 fixed
suse enterprise server 15 SP7	102.9.0-150200.152.81.1 fixed

MozillaFirefox-translations-other

suse enterprise desktop 15 SP4	102.9.0-150200.152.81.1 fixed
suse enterprise desktop 15 SP5	102.9.0-150200.152.81.1 fixed
suse enterprise desktop 15 SP6	102.9.0-150200.152.81.1 fixed
suse enterprise desktop 15 SP7	102.9.0-150200.152.81.1 fixed
suse enterprise sap 15 SP2	102.9.0-150200.152.81.1 fixed
suse enterprise sap 15 SP3	102.9.0-150200.152.81.1 fixed
suse enterprise sap 15 SP4	102.9.0-150200.152.81.1 fixed
suse enterprise sap 15 SP5	102.9.0-150200.152.81.1 fixed
suse enterprise sap 15 SP6	102.9.0-150200.152.81.1 fixed
suse enterprise sap 15 SP7	102.9.0-150200.152.81.1 fixed
suse enterprise server 15 SP1	102.9.0-150000.150.79.1 fixed
suse enterprise server 15 SP2	102.9.0-150200.152.81.1 fixed
suse enterprise server 15 SP3	102.9.0-150200.152.81.1 fixed
suse enterprise server 15 SP4	102.9.0-150200.152.81.1 fixed
suse enterprise server 15 SP5	102.9.0-150200.152.81.1 fixed
suse enterprise server 15 SP6	102.9.0-150200.152.81.1 fixed
suse enterprise server 15 SP7	102.9.0-150200.152.81.1 fixed

Common Weakness Enumeration

CWE-668 - Exposure of Resource to Wrong Sphere
The product exposes a resource to the wrong control sphere, providing unintended actors with inappropriate access to the resource.
CWE-22 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
The software uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the software does not properly neutralize special elements within the pathname that can cause the pathname to resolve to a location that is outside of the restricted directory.

References

https://bugzilla.mozilla.org/show_bug.cgi?id=1814733

https://www.mozilla.org/security/advisories/mfsa2023-09/

https://bugzilla.mozilla.org/show_bug.cgi?id=1814733

https://www.mozilla.org/security/advisories/mfsa2023-09/

https://bugzilla.mozilla.org/show_bug.cgi?id=1814733