CVE-2023-5727

CVSS v3.1 6.5 (Medium)

EPSS 0.05 % (23^th)

Affected Products 4

Advisories 14

The executable file warning was not presented when downloading .msix, .msixbundle, .appx, and .appxbundle files, which can run commands on a user's computer.

Note: This issue only affected Windows operating systems. Other operating systems are unaffected. This vulnerability affects Firefox < 119, Firefox ESR < 115.4, and Thunderbird < 115.4.1.

Weaknesses

CWE-NVD-noinfo

CVE Status: PUBLISHED
CNA: Mozilla Corporation
Published Date: 2023-10-25 18:17:44
(10 months ago)
Updated Date: 2023-11-02 20:09:22
(10 months ago)

Affected Products

Microsoft

Windows

Mozilla

Configuration #1

AND

		CPE23	Up To
OR
	Mozilla Firefox prior 119.0 version	cpe:2.3:a:mozilla:firefox	< 119.0
OR
	Running on/with
	Mozilla Firefox Esr prior 115.4 version	cpe:2.3:a:mozilla:firefox_esr	< 115.4
OR
	Running on/with
	Mozilla Thunderbird prior 115.4.1 version	cpe:2.3:a:mozilla:thunderbird	< 115.4.1
OR
	Running on/with
	Microsoft Windows	cpe:2.3:o:microsoft:windows:-