CVE-2023-37204
MediumCVSS 6.5Exploitation Probability (EPSS)
Low risk34th percentile - higher than 34% of all known CVEs
Summary
A vulnerability in Firefox (< 115) allows a website to obscure the fullscreen notification by using an option element, potentially causing delays due to an expensive computational function. This could lead to user confusion and possible spoofing attacks.
Risk Assessment
Organizations may be exposed to attacks that exploit user confusion, potentially leading to unauthorized access or fraud.
Recommendation
It is recommended to update Firefox to version 115 or newer to mitigate the risks associated with this vulnerability.
Original NVD description (English source)
A website could have obscured the fullscreen notification by using an option element by introducing lag via an expensive computational function. This could have led to user confusion and possible spoofing attacks. This vulnerability affects Firefox < 115.