[ALPINE:CVE-2023-25730] firefox-esr vulnerability

Severity Medium
Affected Packages 15
Fixed Packages 15
CVEs 1

[From CVE-2023-25730] A background script invoking <code>requestFullscreen</code> and then blocking the main thread could force the browser into fullscreen mode indefinitely, resulting in potential user confusion or spoofing attacks. This vulnerability affects Firefox < 110, Thunderbird < 102.8, and Firefox ESR < 102.8.

Type Package URL Namespace Name / Product Version Distribution / Platform Arch Patch / Fix
Fixed pkg:apk/alpine/firefox-esr?arch=x86_64&distro=alpine-edge alpine firefox-esr = 102.8.0-r0 alpine-edge x86_64
Affected pkg:apk/alpine/firefox-esr?arch=x86_64&distro=alpine-edge alpine firefox-esr < 102.8.0-r0 alpine-edge x86_64
Fixed pkg:apk/alpine/firefox-esr?arch=x86_64&distro=alpine-3.18 alpine firefox-esr = 102.8.0-r0 alpine-3.18 x86_64
Affected pkg:apk/alpine/firefox-esr?arch=x86_64&distro=alpine-3.18 alpine firefox-esr < 102.8.0-r0 alpine-3.18 x86_64
Fixed pkg:apk/alpine/firefox-esr?arch=x86&distro=alpine-edge alpine firefox-esr = 102.8.0-r0 alpine-edge x86
Affected pkg:apk/alpine/firefox-esr?arch=x86&distro=alpine-edge alpine firefox-esr < 102.8.0-r0 alpine-edge x86
Fixed pkg:apk/alpine/firefox-esr?arch=x86&distro=alpine-3.18 alpine firefox-esr = 102.8.0-r0 alpine-3.18 x86
Affected pkg:apk/alpine/firefox-esr?arch=x86&distro=alpine-3.18 alpine firefox-esr < 102.8.0-r0 alpine-3.18 x86
Fixed pkg:apk/alpine/firefox-esr?arch=s390x&distro=alpine-edge alpine firefox-esr = 102.8.0-r0 alpine-edge s390x
Affected pkg:apk/alpine/firefox-esr?arch=s390x&distro=alpine-edge alpine firefox-esr < 102.8.0-r0 alpine-edge s390x
Fixed pkg:apk/alpine/firefox-esr?arch=s390x&distro=alpine-3.18 alpine firefox-esr = 102.8.0-r0 alpine-3.18 s390x
Affected pkg:apk/alpine/firefox-esr?arch=s390x&distro=alpine-3.18 alpine firefox-esr < 102.8.0-r0 alpine-3.18 s390x
Fixed pkg:apk/alpine/firefox-esr?arch=riscv64&distro=alpine-edge alpine firefox-esr = 102.8.0-r0 alpine-edge riscv64
Affected pkg:apk/alpine/firefox-esr?arch=riscv64&distro=alpine-edge alpine firefox-esr < 102.8.0-r0 alpine-edge riscv64
Fixed pkg:apk/alpine/firefox-esr?arch=ppc64le&distro=alpine-edge alpine firefox-esr = 102.8.0-r0 alpine-edge ppc64le
Affected pkg:apk/alpine/firefox-esr?arch=ppc64le&distro=alpine-edge alpine firefox-esr < 102.8.0-r0 alpine-edge ppc64le
Fixed pkg:apk/alpine/firefox-esr?arch=ppc64le&distro=alpine-3.18 alpine firefox-esr = 102.8.0-r0 alpine-3.18 ppc64le
Affected pkg:apk/alpine/firefox-esr?arch=ppc64le&distro=alpine-3.18 alpine firefox-esr < 102.8.0-r0 alpine-3.18 ppc64le
Fixed pkg:apk/alpine/firefox-esr?arch=armv7&distro=alpine-edge alpine firefox-esr = 102.8.0-r0 alpine-edge armv7
Affected pkg:apk/alpine/firefox-esr?arch=armv7&distro=alpine-edge alpine firefox-esr < 102.8.0-r0 alpine-edge armv7
Fixed pkg:apk/alpine/firefox-esr?arch=armv7&distro=alpine-3.18 alpine firefox-esr = 102.8.0-r0 alpine-3.18 armv7
Affected pkg:apk/alpine/firefox-esr?arch=armv7&distro=alpine-3.18 alpine firefox-esr < 102.8.0-r0 alpine-3.18 armv7
Fixed pkg:apk/alpine/firefox-esr?arch=armhf&distro=alpine-edge alpine firefox-esr = 102.8.0-r0 alpine-edge armhf
Affected pkg:apk/alpine/firefox-esr?arch=armhf&distro=alpine-edge alpine firefox-esr < 102.8.0-r0 alpine-edge armhf
Fixed pkg:apk/alpine/firefox-esr?arch=armhf&distro=alpine-3.18 alpine firefox-esr = 102.8.0-r0 alpine-3.18 armhf
Affected pkg:apk/alpine/firefox-esr?arch=armhf&distro=alpine-3.18 alpine firefox-esr < 102.8.0-r0 alpine-3.18 armhf
Fixed pkg:apk/alpine/firefox-esr?arch=aarch64&distro=alpine-edge alpine firefox-esr = 102.8.0-r0 alpine-edge aarch64
Affected pkg:apk/alpine/firefox-esr?arch=aarch64&distro=alpine-edge alpine firefox-esr < 102.8.0-r0 alpine-edge aarch64
Fixed pkg:apk/alpine/firefox-esr?arch=aarch64&distro=alpine-3.18 alpine firefox-esr = 102.8.0-r0 alpine-3.18 aarch64
Affected pkg:apk/alpine/firefox-esr?arch=aarch64&distro=alpine-3.18 alpine firefox-esr < 102.8.0-r0 alpine-3.18 aarch64
# CVE Description CVSS EPSS EPSS Trend (30 days) Affected Products Weaknesses Security Advisories Exploits PoC Pubblication Date Modification Date
# CVE Description CVSS EPSS EPSS Trend (30 days) Affected Products Weaknesses Security Advisories PoC Pubblication Date Modification Date
Loading...