Security Advisory

CVE-2023-23597

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2023-06-02 00:00:00

Last updated 2025-12-18 15:23:23

Assigner mozilla

CVSS score not scored

State PUBLISHED

Description

A compromised web child process could disable web security opening restrictions, leading to a new child process being spawned within the `file://` context. Given a reliable exploit primitive, this new process could be exploited again leading to arbitrary file read. This vulnerability affects Firefox < 109.

← Browse all CVEs View on cve.org ↗