CVE-2023-6208: High severity thunderbird vulnerability
When using X11, text selected by the page using the Selection API was erroneously copied into the primary selection, a temporary storage not unlike the clipboard. This bug only affects Firefox on X11. Other systems are unaffected. This vulnerability affects Firefox < 120, Firefox ESR < 115.5.0, and Thunderbird < 115.5.
Other sources
When using X11, text selected by the page using the Selection API was erroneously copied into the primary selection, a temporary storage not unlike the clipboard.
This bug only affects Firefox on X11. Other systems are unaffected.
External Reference: https://www.mozilla.org/en-US/security/advisories/mfsa2023-50/#CVE-2023-6208
— Red Hat
When using X11, text selected by the page using the Selection API was erroneously copied into the primary selection, a temporary storage not unlike the clipboard.This bug only affects Firefox on X11. Other systems are unaffected.
— Mozilla
When using X11, text selected by the page using the Selection API was erroneously copied into the primary selection, a temporary storage not unlike the clipboard.This bug only affects Thunderbird on X11. Other systems are unaffected.
— Mozilla
Affected Software
Event History
Parent advisories
This vulnerability appears in the following advisories.
Peer vulnerabilities
Found alongside the following vulnerabilities.
Frequently Asked Questions
What is the vulnerability ID for this issue?
The vulnerability ID is CVE-2023-6208.
Which systems are affected by this vulnerability?
This vulnerability affects Thunderbird on X11 and Firefox versions below 120 and below 115.5.
What is the severity rating of CVE-2023-6208?
The severity rating of CVE-2023-6208 is medium with a value of 4.
How does this vulnerability occur?
When using X11, text selected by the page using the Selection API is erroneously copied into the primary selection.
How can I fix this vulnerability?
To fix this vulnerability, update Thunderbird to version 115.5 or higher and update Firefox to version 120 or higher.