CVE-2023-37206

Reference Links

• https://bugzilla.mozilla.org/show_bug.cgi?id=1813299
• https://www.mozilla.org/security/advisories/mfsa2023-22/
• https://security.gentoo.org/glsa/202401-10
• https://launchpad.net/bugs/cve/CVE-2023-37206
• https://www.mozilla.org/en-US/security/advisories/mfsa2023-22/
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-37206
• https://www.mozilla.org/en-US/security/advisories/mfsa2023-22/#CVE-2023-37206
• https://ubuntu.com/security/notices/USN-6201-1
• https://nvd.nist.gov/vuln/detail/CVE-2023-37206
• https://security-tracker.debian.org/tracker/CVE-2023-37206
• https://ubuntu.com/security/CVE-2023-37206
• https://www.mozilla.org/en-US/security/advisories/mfsa2023-22/#CVE-2023-37211

Parent vulnerabilities

(Appears in the following advisories)

• MFSA2023-22
• USN-6201-1

Peer vulnerabilities

(Found alongside the following vulnerabilities)

• CVE-2023-3482
• CVE-2023-37201
• CVE-2023-37202
• CVE-2023-37203
• CVE-2023-37204
• CVE-2023-37205
• CVE-2023-37206
• CVE-2023-37207
• CVE-2023-37208
• CVE-2023-37209
• CVE-2023-37210
• CVE-2023-37211
• CVE-2023-37212

Frequently Asked Questions

• What is the vulnerability ID of this security issue?

  The vulnerability ID is CVE-2023-37206.

• What software is affected by this security vulnerability?

  Firefox versions prior to 115 are affected.

• What is the severity of CVE-2023-37206?

  The severity of this vulnerability is medium.

• How can an attacker exploit this vulnerability?

  An attacker can trick a user into submitting sensitive data to a malicious website by uploading files containing symlinks.

• Where can I find more information about CVE-2023-37206?

  You can find more information about this vulnerability in the following references: [link1](https://bugzilla.mozilla.org/show_bug.cgi?id=1813299), [link2](https://www.mozilla.org/security/advisories/mfsa2023-22/), [link3](https://launchpad.net/bugs/cve/CVE-2023-37206).