CVE-2023-37204

Published: Jul 5, 2023Modified: Jun 17, 2026

6.5

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

Exploitability: 2.8 / Impact: 3.6

Source: NVD

Description

A website could have obscured the fullscreen notification by using an option element by introducing lag via an expensive computational function. This could have led to user confusion and possible spoofing attacks. This vulnerability affects Firefox < 115.

Affected (1)

Products: Mozilla: Firefox

1 product

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Mozilla Firefox	Before 115.0

References (6)

https://bugzilla.mozilla.org/show_bug.cgi?id=1832195

Source: security@mozilla.org

Issue TrackingPermissions Required

https://security.gentoo.org/glsa/202401-10

Source: security@mozilla.org

https://www.mozilla.org/security/advisories/mfsa2023-22/

Source: security@mozilla.org

Vendor Advisory

https://bugzilla.mozilla.org/show_bug.cgi?id=1832195

Source: af854a3a-2127-422b-91ae-364da2661108

Issue TrackingPermissions Required

https://security.gentoo.org/glsa/202401-10

Source: af854a3a-2127-422b-91ae-364da2661108

https://www.mozilla.org/security/advisories/mfsa2023-22/

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.