https://seclists.org/oss-sec/2023/q4/160: with firefox on X11, any page can pastejack you anytime
Published Oct 20, 2023
·Updated
Affected Software
4 affected components
Mozilla Firefox
xterm xterm
Roy Marples rxvt-unicode
Microsoft Windows Terminal
Frequently Asked Questions
1
What is the severity of the vulnerability when using Firefox on X11?
The severity of this vulnerability is critical as it allows any page to paste content into the terminal without user consent.
2
How do I fix the vulnerability in Firefox on X11?
To mitigate this vulnerability, users should ensure that xterm or other terminal emulators are filtering out the ESC character from pasted content.
3
Which software versions are affected by the vulnerability in Firefox on X11?
The vulnerability affects Mozilla Firefox running on X11, along with terminal emulators like xterm and rxvt-unicode.
4
Can this vulnerability affect my system if I use a different terminal emulator?
Yes, the vulnerability can still affect systems if other terminal emulators do not properly filter pasted content.
5
Is there an update available to address the Firefox on X11 vulnerability?
As of now, there is no specific update from Mozilla to address this vulnerability, so users need to apply workarounds.