CVE-2023-4045

Offscreen Canvas did not properly track cross-origin tainting, which could have been used to access image data from another site in violation of same-origin…

published August 1, 2023

CVSS
—
EPSS
1%
Percentile
47.7
In the wild
Unconfirmed
What it is

Offscreen Canvas did not properly track cross-origin tainting, which could have been used to access image data from another site in violation of same-origin policy. This vulnerability affects Firefox < 116, Firefox ESR < 102.14, and Firefox ESR < 115.1.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00594 · 47.7th percentile
Published
2023-08-01T14:56Z
EPSS history
Timeline
  • 01 AUG 14:56Z
    Offscreen Canvas did not properly track cross-origin tainting, which could have been used to access image data from another site in violation of same-origin…
    cvelistv5