CVE-2023-5725

Publication date

2023-10-24 12:47:11

Family

mozilla

State

PUBLISHED

Description

A malicious installed WebExtension could open arbitrary URLs, which under the right circumstance could be leveraged to collect sensitive user data. This vulnerability affects Firefox < 119, Firefox ESR < 115.4, and Thunderbird < 115.4.1.