CVE-2023-4583
Summary
| CVE | CVE-2023-4583 |
|---|---|
| State | PUBLIC |
| Assigner | [email protected] |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2023-09-11 09:15:00 UTC |
| Updated | 2023-09-14 03:52:00 UTC |
| Description | When checking if the Browsing Context had been discarded in `HttpBaseChannel`, if the load group was not available then it was assumed to have already been discarded which was not always the case for private channels after the private session had ended. This vulnerability affects Firefox < 117, Firefox ESR < 115.2, and Thunderbird < 115.2. |
Risk And Classification
Problem Types: NVD-CWE-noinfo
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | Mozilla | Firefox | All | All | All | All |
| Application | Mozilla | Firefox Esr | All | All | All | All |
| Application | Mozilla | Thunderbird | All | All | All | All |
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| Security Vulnerabilities fixed in Firefox ESR 115.2 — Mozilla | MISC | www.mozilla.org | |
| Security Vulnerabilities fixed in Thunderbird 115.2 — Mozilla | MISC | www.mozilla.org | |
| Security Vulnerabilities fixed in Firefox 117 — Mozilla | MISC | www.mozilla.org | |
| 1842030 - After closing the last Private Window, context is not always reset/cleared... | MISC | bugzilla.mozilla.org | |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
Legacy QID Mappings
- 199794 Ubuntu Security Notification for Thunderbird Vulnerabilities (USN-6405-1)
- 257255 CentOS Security Update for thunderbird
- 257256 CentOS Security Update for firefox
- 296105 Oracle Solaris 11.4 Support Repository Update (SRU) 63.157.1 Missing (CPUOCT2023)
- 503460 Alpine Linux Security Update for firefox-esr
- 506068 Alpine Linux Security Update for firefox-esr
- 710875 Gentoo Linux Mozilla Thunderbird Multiple Vulnerabilities (GLSA 202402-25)
- 754862 SUSE Enterprise Linux Security Update for MozillaThunderbird (SUSE-SU-2023:3664-1)
- 961029 Rocky Linux Security Update for thunderbird (RLSA-2023:4954)
- 961037 Rocky Linux Security Update for firefox (RLSA-2023:4952)