跳转到帖子

Amazon Linux AMI 2: CVE-2023-25731: Security patch for firefox, thunderbird (Multiple Advisories)

recommended_posts

发布于
  • Members

Amazon Linux AMI 2: CVE-2023-25731: Security patch for firefox, thunderbird (Multiple Advisories)

Severity
9
CVSS
(AV:N/AC:M/Au:N/C:C/I:C/A:C)
Published
03/07/2023
Created
03/08/2023
Added
03/07/2023
Modified
01/28/2025

Description

Due to URL previews in the network panel of developer tools improperly storing URLs, query parameters could potentially be used to overwrite global objects in privileged code. This vulnerability affects Firefox < 110.

Solution(s)

  • amazon-linux-ami-2-upgrade-firefox
  • amazon-linux-ami-2-upgrade-firefox-debuginfo
  • amazon-linux-ami-2-upgrade-thunderbird
  • amazon-linux-ami-2-upgrade-thunderbird-debuginfo

References

  • https://attackerkb.com/topics/cve-2023-25731
  • AL2/ALAS-2023-1983
  • AL2/ALASFIREFOX-2023-007
  • CVE - 2023-25731
  • 查看数 722
  • 已创建
  • 最后回复