CVE-2023-23604: Creation of duplicate SystemPrincipal from less secure contexts
A duplicate SystemPrincipal object could be created when parsing a non-system html document via DOMParser::ParseFromSafeString. This could have lead to bypassing web security checks. This vulnerability affects Firefox < 109.
Other sources
A duplicate <code>SystemPrincipal</code> object could be created when parsing a non-system html document via <code>DOMParser::ParseFromSafeString</code>. This could have lead to bypassing web security checks. This vulnerability affects Firefox < 109.
A duplicate SystemPrincipal object could be created when parsing a non-system html document via DOMParser::ParseFromSafeString. This could have lead to bypassing web security checks.
Affected Software
Event History
Peer vulnerabilities
Found alongside the following vulnerabilities.
Frequently Asked Questions
What is the vulnerability ID for this issue?
The vulnerability ID for this issue is CVE-2023-23604.
What is the title of this vulnerability?
The title of this vulnerability is 'A duplicate SystemPrincipal object could be created when parsing a non-system html document via DOMParser::ParseFromSafeString'.
What software is affected by this vulnerability?
This vulnerability affects Mozilla Firefox version up to exclusive 109.
What is the severity of CVE-2023-23604?
The severity of CVE-2023-23604 is low.
How can this vulnerability be exploited?
This vulnerability could lead to bypassing web security checks.