Vulnerability · Published Sep 11, 2023 · Assigned by mozilla
CVE-2023-4579Persisted search terms were formatted as URLs
Low 3.1
In plain English
A low-severity security flaw in Firefox from Mozilla. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.5% (higher than 39% of all known vulnerabilities).
Severity (CVSS NVD)3.1Low
Exploit odds (30 days)0.5%top 60.6% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
Search queries in the default search engine could appear to have been the currently navigated URL if the search query itself was a well formed URL. This could have led to a site spoofing another if it had been maliciously set as the default search engine. This vulnerability affects Firefox < 117.
Affected packages & fixed versions
| Ecosystem | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu:22.04:LTS | mozjs102 | no fix listed | UBUNTU-CVE-2023-4579 |
| Ubuntu:24.04:LTS | mozjs102 | no fix listed | UBUNTU-CVE-2023-4579 |
| Ubuntu:22.04:LTS | mozjs78 | no fix listed | UBUNTU-CVE-2023-4579 |
| Ubuntu:22.04:LTS | mozjs91 | no fix listed | UBUNTU-CVE-2023-4579 |