CVE-2023-4051
First published: Tue Aug 01 2023(Updated: )
A website could have obscured the full screen notification by using the file open dialog. This could have led to user confusion and possible spoofing attacks.
Credit: security@mozilla.org security@mozilla.org security@mozilla.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Mozilla Firefox ESR | <115.2 | 115.2 |
| Mozilla Thunderbird | <115.2 | 115.2 |
| Mozilla Firefox | <116 | 116 |
| Mozilla Firefox | <116.0 | |
| redhat/firefox | <115.2 | 115.2 |
| redhat/thunderbird | <115.2 | 115.2 |
| debian/firefox | 133.0.3-1 | |
| debian/firefox-esr | 115.14.0esr-1~deb11u1 128.5.0esr-1~deb11u1 128.3.1esr-1~deb12u1 128.5.0esr-1~deb12u1 128.5.0esr-1 128.5.1esr-1 | |
| debian/thunderbird | 1:115.12.0-1~deb11u1 1:128.5.0esr-1~deb11u1 1:115.16.0esr-1~deb12u1 1:128.5.0esr-1~deb12u1 1:128.5.0esr-1 1:128.5.2esr-1 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://bugzilla.mozilla.org/show_bug.cgi?id=1821884
- https://www.mozilla.org/security/advisories/mfsa2023-29/
- https://www.mozilla.org/security/advisories/mfsa2023-36/
- https://www.mozilla.org/security/advisories/mfsa2023-38/
- https://launchpad.net/bugs/cve/CVE-2023-4051
- https://www.mozilla.org/en-US/security/advisories/mfsa2023-36/
- https://www.mozilla.org/en-US/security/advisories/mfsa2023-38/
- https://www.mozilla.org/en-US/security/advisories/mfsa2023-29/
- https://www.mozilla.org/en-US/security/advisories/mfsa2023-36/#CVE-2023-4051
- https://access.redhat.com/errata/RHSA-2023:4950
- https://access.redhat.com/errata/RHSA-2023:4947
- https://access.redhat.com/errata/RHSA-2023:4951
- https://access.redhat.com/errata/RHSA-2023:4946
- https://access.redhat.com/errata/RHSA-2023:4949
- https://access.redhat.com/errata/RHSA-2023:4948
- https://access.redhat.com/errata/RHSA-2023:4945
- https://access.redhat.com/errata/RHSA-2023:4958
- https://access.redhat.com/errata/RHSA-2023:4955
- https://access.redhat.com/errata/RHSA-2023:4959
- https://access.redhat.com/errata/RHSA-2023:4953
- https://access.redhat.com/errata/RHSA-2023:4957
- https://access.redhat.com/errata/RHSA-2023:4956
- https://access.redhat.com/errata/RHSA-2023:4952
- https://access.redhat.com/errata/RHSA-2023:4954
- https://access.redhat.com/errata/RHSA-2023:5019
- https://bugzilla.redhat.com/show_bug.cgi?id=2236076
- https://www.mozilla.org/en-US/security/advisories/mfsa2023-29/#CVE-2023-4051
- https://www.mozilla.org/en-US/security/advisories/mfsa2023-38/#CVE-2023-4051
- https://security-tracker.debian.org/tracker/CVE-2023-4051
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4051
- https://nvd.nist.gov/vuln/detail/CVE-2023-4051
- https://ubuntu.com/security/CVE-2023-4051
Peer vulnerabilities
(Found alongside the following vulnerabilities)
- CVE-2023-4573
- CVE-2023-4574
- CVE-2023-4575
- CVE-2023-4576
- CVE-2023-4577
- CVE-2023-4051
- CVE-2023-4578
- CVE-2023-4053
- CVE-2023-4580
- CVE-2023-4581
- CVE-2023-4582
- CVE-2023-4583
- CVE-2023-4584
- CVE-2023-4585
- CVE-2023-4045
- CVE-2023-4046
- CVE-2023-4047
- CVE-2023-4048
- CVE-2023-4049
- CVE-2023-4050
- CVE-2023-4052
- CVE-2023-4054
- CVE-2023-4055
- CVE-2023-4056
- CVE-2023-4057
- CVE-2023-4058
Frequently Asked Questions
What is the vulnerability ID of this vulnerability?
The vulnerability ID of this vulnerability is CVE-2023-4051.
Which software products are affected by this vulnerability?
This vulnerability affects Mozilla Firefox versions less than 116, Mozilla Thunderbird versions less than 115.2, and their respective Ubuntu and Red Hat packages.
What is the severity of CVE-2023-4051?
The severity of CVE-2023-4051 is high with a CVSS score of 7.5.
What are the potential consequences of this vulnerability?
This vulnerability could lead to user confusion and possible spoofing attacks.
Where can I find more information about CVE-2023-4051?
You can find more information about CVE-2023-4051 in the references section of the vulnerability description.
- agent/type
- agent/first-publish-date
- collector/launchpad-cve
- source/Launchpad
- agent/severity
- agent/weakness
- agent/author
- collector/mozilla-advisory
- source/Mozilla
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- collector/nvd-cve
- source/NVD
- collector/nvd-latest
- collector/nvd-index
- collector/redhat-bugzilla
- source/Red Hat
- alias/CVE-2023-4051
- collector/usn-cve
- source/Ubuntu
- agent/references
- agent/tags
- agent/event
- agent/description
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- collector/security-tracker-debian
- source/Debian
- agent/softwarecombine
- collector/nvd-api
- vendor/mozilla
- canonical/mozilla firefox esr
- canonical/mozilla thunderbird
- canonical/mozilla firefox
- package-manager/redhat
- package-manager/debian