CVE-2023-29539
CVE-2023-29539
Vexday Risk Score
3Bajo
Decisión SSVC (CISA)
Track
Sin señal de explotación → monitorear
CVSS —EPSS 0.7%KEV nãoPoC —Nuclei —Metasploit —Patch —
Ciclo de vida
02 jun 2023Publicada en NVD
Recomendación: Monitorear — sin señal de explotación por ahora.
When handling the filename directive in the Content-Disposition header, the filename would be truncated if the filename contained a NULL character. This could have led to reflected file download attacks potentially tricking users to install malware. This vulnerability affects Firefox < 112, Focus for Android < 112, Firefox ESR < 102.10, Firefox for Android < 112, and Thunderbird < 102.10.
Productos afectados
Mozilla · FirefoxMozilla · Firefox ESRMozilla · Firefox for AndroidMozilla · Focus for AndroidMozilla · Thunderbird¿Quieres saber si tu infraestructura está expuesta a esto?
Hablar con TrueHacking →