Ubuntu: (Multiple Advisories) (CVE-2023-23604): Firefox vulnerabilities

Ubuntu: (Multiple Advisories) (CVE-2023-23604): Firefox vulnerabilities

Severity

7

CVSS

(AV:N/AC:M/Au:N/C:N/I:C/A:N)

Published

01/23/2023

Created

01/25/2023

Added

01/23/2023

Modified

01/28/2025

Description

A duplicate <code>SystemPrincipal</code> object could be created when parsing a non-system html document via <code>DOMParser::ParseFromSafeString</code>. This could have lead to bypassing web security checks. This vulnerability affects Firefox < 109.

Solution(s)

• ubuntu-upgrade-firefox

References

• https://attackerkb.com/topics/cve-2023-23604
• CVE - 2023-23604
• CVE-2023-23604
• USN-5816-1
• USN-5816-2