CVE-2023-28163CWE-22path-traversal

CVE-2023-28163

Medium · published June 2, 2023

CVSS v3.1
6.5
EPSS
1%
Percentile
56.1
In the wild
Unconfirmed
What it is

When downloading files through the Save As dialog on Windows with suggested filenames containing environment variable names, Windows would have resolved those in the context of the current user. <br>*This bug only affects Firefox on Windows. Other versions of Firefox are unaffected.*. This vulnerability affects Firefox < 111, Firefox ESR < 102.9, and Thunderbird < 102.9.

The record
Technical detail
CVSS v3.1
6.5 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
CVSS v4.0
Not supplied
EPSS
0.00798 · 56.1th percentile
Weakness
CWE-22 · Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
Published
2023-06-02T21:15Z
Affected products (3)
ProductVersionsFixed in
mozilla/firefox< 111.0111.0
mozilla/firefox_esr< 102.9102.9
mozilla/thunderbird< 102.9102.9
References (9)
https://bugzilla.mozilla.org/show_bug.cgi?id=1817768 · [email protected]https://www.mozilla.org/security/advisories/mfsa2023-09/ · [email protected]https://www.mozilla.org/security/advisories/mfsa2023-10/ · [email protected]https://www.mozilla.org/security/advisories/mfsa2023-11/ · [email protected]https://bugzilla.mozilla.org/show_bug.cgi?id=1817768 · af854a3a-2127-422b-91ae-364da2661108https://www.mozilla.org/security/advisories/mfsa2023-09/ · af854a3a-2127-422b-91ae-364da2661108https://www.mozilla.org/security/advisories/mfsa2023-10/ · af854a3a-2127-422b-91ae-364da2661108https://www.mozilla.org/security/advisories/mfsa2023-11/ · af854a3a-2127-422b-91ae-364da2661108https://bugzilla.mozilla.org/show_bug.cgi?id=1817768 · 134c704f-9b21-4f2e-91b3-4a467353bcc0
EPSS history
Timeline
  • 02 JUN 00:00Z
    When downloading files through the Save As dialog on Windows with suggested filenames containing environment variable names, Windows would have resolved those…
    cvelistv5