CVE-2023-5732: Address bar spoofing via bidirectional characters
An attacker could have created a malicious link using bidirectional characters to spoof the location in the address bar when visited.
Affected Software
Event History
Parent advisories
This vulnerability appears in the following advisories.
Peer vulnerabilities
Found alongside the following vulnerabilities.
Frequently Asked Questions
What is CVE-2023-5732?
CVE-2023-5732 is a vulnerability that allows an attacker to create a malicious link using bidirectional characters to spoof the location in the address bar.
What software is affected by CVE-2023-5732?
Mozilla Firefox ESR version up to 115.4 is affected by CVE-2023-5732.
How severe is CVE-2023-5732?
CVE-2023-5732 has a severity level of medium.
How can I fix CVE-2023-5732?
To fix CVE-2023-5732, update Mozilla Firefox ESR to version 115.4 or later.
Where can I find more information about CVE-2023-5732?
For more information about CVE-2023-5732, you can refer to the following references: [Bugzilla](https://bugzilla.mozilla.org/show_bug.cgi?id=1690979) and [Mozilla Security Advisories](https://www.mozilla.org/en-US/security/advisories/mfsa2023-46/).