Security Advisory

CVE-2023-6209

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2023-11-21 14:28:53

Last updated 2025-02-13 17:26:12

Assigner mozilla

CVSS score not scored

State PUBLISHED

Description

Relative URLs starting with three slashes were incorrectly parsed, and a path-traversal "/../" part in the path could be used to override the specified host. This could contribute to security problems in web sites. This vulnerability affects Firefox < 120, Firefox ESR < 115.5.0, and Thunderbird < 115.5.

← Browse all CVEs View on cve.org ↗