CVE-2023-37206

MediumCVSS 6.5

Published: 05/07/2023(UTC)Updated: 17/06/2026(UTC)Translated: 19/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.60%

44th percentile - higher than 44% of all known CVEs

Summary

The vulnerability allows an attacker to trick a user into submitting sensitive data to a malicious website by uploading files that contain symlinks. This affects Firefox versions below 115.

Risk Assessment

Organizations may be at risk of sensitive data leakage if users inadvertently submit information to malicious websites.

Recommendation

It is recommended to update Firefox to version 115 or newer to mitigate the risk associated with this vulnerability.

Original NVD description (English source)

Uploading files which contain symlinks may have allowed an attacker to trick a user into submitting sensitive data to a malicious website. This vulnerability affects Firefox < 115.