CVE-2023-28160

Reference Links

• https://bugzilla.mozilla.org/show_bug.cgi?id=1802385
• https://www.mozilla.org/security/advisories/mfsa2023-09/
• https://launchpad.net/bugs/cve/CVE-2023-28160
• https://www.mozilla.org/en-US/security/advisories/mfsa2023-09/
• https://www.mozilla.org/en-US/security/advisories/mfsa2023-09/#CVE-2023-28160
• https://security-tracker.debian.org/tracker/CVE-2023-28160
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-28160
• https://nvd.nist.gov/vuln/detail/CVE-2023-28160
• https://ubuntu.com/security/CVE-2023-28160

Parent vulnerabilities

(Appears in the following advisories)

• MFSA2023-09

Peer vulnerabilities

(Found alongside the following vulnerabilities)

• CVE-2023-28159
• CVE-2023-25748
• CVE-2023-25749
• CVE-2023-25750
• CVE-2023-25751
• CVE-2023-28160
• CVE-2023-28164
• CVE-2023-28161
• CVE-2023-28162
• CVE-2023-25752
• CVE-2023-28163
• CVE-2023-28176
• CVE-2023-28177

Frequently Asked Questions

• What is CVE-2023-28160?

  CVE-2023-28160 is a vulnerability that occurs when following a redirect to a publicly accessible web extension file, resulting in the URL being translated to the local path and potentially leaking sensitive information.

• Which software is affected by CVE-2023-28160?

  The Firefox web browser versions before 111 are affected by CVE-2023-28160.

• What is the severity of CVE-2023-28160?

  CVE-2023-28160 has a severity level of medium with a value of 4.

• How can I fix CVE-2023-28160?

  To fix CVE-2023-28160, update your Firefox browser to version 111 or higher.

• Where can I find more information about CVE-2023-28160?

  You can find more information about CVE-2023-28160 in the Mozilla Bugzilla and Mozilla Security Advisories websites.