First published: Tue May 09 2023(Updated: )
Documents were incorrectly assuming an ordering of principal objects when ensuring we were loading an appropriately privileged principal. In certain circumstances it might have been possible to cause a document to be loaded with a higher privileged principal than intended.
Credit: security@mozilla.org security@mozilla.org security@mozilla.org
Affected Software | Affected Version | How to fix |
---|---|---|
Mozilla Firefox | <113 | 113 |
Mozilla Firefox | <113.0 | |
debian/firefox | 131.0-1 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
(Found alongside the following vulnerabilities)
CVE-2023-32210 is a vulnerability in Mozilla Firefox that allows a document to be loaded with a higher privileged principal than intended.
CVE-2023-32210 can allow an attacker to load a document with a higher privileged principal than intended in certain circumstances.
Mozilla Firefox versions up to and excluding 113 are affected by CVE-2023-32210.
To fix the vulnerability, update Mozilla Firefox to version 113 or later.
You can find more information about CVE-2023-32210 on the Mozilla Bugzilla and Mozilla Security Advisories websites.