CVE-2023-6210

CVSS v3.1 6.5 (Medium)

EPSS 0.05 % (23^th)

Affected Products 1

Advisories 3

When an https: web page created a pop-up from a "javascript:" URL, that pop-up was incorrectly allowed to load blockable content such as iframes from insecure http: URLs This vulnerability affects Firefox < 120.

Weaknesses

CWE-NVD-noinfo

CVE Status: PUBLISHED
CNA: Mozilla Corporation
Published Date: 2023-11-21 15:15:08
(10 months ago)
Updated Date: 2024-01-07 11:15:14
(8 months ago)

Affected Products

Mozilla

Firefox

Configuration #1

		CPE23	From	Up To
	Mozilla Firefox prior 120.0 version	cpe:2.3:a:mozilla:firefox		< 120.0