CVE-2023-3482
MediumCVSS 6.5Exploitation Probability (EPSS)
Low risk38th percentile - higher than 38% of all known CVEs
Summary
In Firefox, when configured to block the storage of all cookies, it was still possible to store data in localstorage using an iframe with a source of 'about:blank'. This could lead to malicious websites storing tracking data without user consent.
Risk Assessment
Malicious websites could exploit this vulnerability to collect user data, violating privacy and potentially leading to unauthorized tracking.
Recommendation
It is recommended to update Firefox to version 115 or later to mitigate this vulnerability.
Original NVD description (English source)
When Firefox is configured to block storage of all cookies, it was still possible to store data in localstorage by using an iframe with a source of 'about:blank'. This could have led to malicious websites storing tracking data without permission. This vulnerability affects Firefox < 115.