CVE-2023-6210
21.11.2023, 15:15
When an https: web page created a pop-up from a "javascript:" URL, that pop-up was incorrectly allowed to load blockable content such as iframes from insecure http: URLs This vulnerability affects Firefox < 120.Enginsight
Vendor | Product | Version |
---|---|---|
mozilla | firefox | 𝑥 < 120.0 |
𝑥
= Vulnerable software versions

Ubuntu Releases
Ubuntu Product | |||||||||||||||||
---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
firefox |
| ||||||||||||||||
mozjs102 |
| ||||||||||||||||
mozjs38 |
| ||||||||||||||||
mozjs52 |
| ||||||||||||||||
mozjs68 |
| ||||||||||||||||
mozjs78 |
| ||||||||||||||||
mozjs91 |
| ||||||||||||||||
thunderbird |
|
References