CVE-2023-23598

CVE-2023-23598

Medium · published June 2, 2023

CVSS v3.1
6.5
EPSS
1%
Percentile
50.1
In the wild
Unconfirmed
What it is

Due to the Firefox GTK wrapper code's use of text/plain for drag data and GTK treating all text/plain MIMEs containing file URLs as being dragged a website could arbitrarily read a file via a call to `DataTransfer.setData`. This vulnerability affects Firefox < 109, Firefox ESR < 102.7, and Thunderbird < 102.7.

The record
Technical detail
CVSS v3.1
6.5 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00641 · 50.1th percentile
Published
2023-06-02T21:15Z
Affected products (3)
ProductVersionsFixed in
mozilla/firefox< 109.0109.0
mozilla/firefox_esr< 102.7102.7
mozilla/thunderbird< 102.7102.7
References (8)
https://bugzilla.mozilla.org/show_bug.cgi?id=1800425 · [email protected]https://www.mozilla.org/security/advisories/mfsa2023-01/ · [email protected]https://www.mozilla.org/security/advisories/mfsa2023-02/ · [email protected]https://www.mozilla.org/security/advisories/mfsa2023-03/ · [email protected]https://bugzilla.mozilla.org/show_bug.cgi?id=1800425 · af854a3a-2127-422b-91ae-364da2661108https://www.mozilla.org/security/advisories/mfsa2023-01/ · af854a3a-2127-422b-91ae-364da2661108https://www.mozilla.org/security/advisories/mfsa2023-02/ · af854a3a-2127-422b-91ae-364da2661108https://www.mozilla.org/security/advisories/mfsa2023-03/ · af854a3a-2127-422b-91ae-364da2661108
EPSS history
Timeline
  • 02 JUN 00:00Z
    Arbitrary file read from GTK drag and drop on Linux
    cvelistv5