CVE-2023-37205

MediumCVSS 6.5

Published: 05/07/2023(UTC)Updated: 17/06/2026(UTC)Translated: 19/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.43%

34th percentile - higher than 34% of all known CVEs

The use of RTL Arabic characters in the address bar may have allowed for URL spoofing. This vulnerability affects Firefox versions below 115.

Organizations may be exposed to phishing attacks that exploit fake URLs, potentially leading to user data theft.

It is recommended to update Firefox to version 115 or newer to mitigate the risk associated with this vulnerability.

Original NVD description (English source)

The use of RTL Arabic characters in the address bar may have allowed for URL spoofing. This vulnerability affects Firefox < 115.