CVE Catalog

CVE-2023-37210

MediumCVSS 6.5
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Low risk
0.24%

14th percentile - higher than 14% of all known CVEs

Summary

A website could prevent a user from exiting full-screen mode via alert and prompt calls. This could lead to user confusion and possible spoofing attacks. This vulnerability affects Firefox versions below 115.

Risk Assessment

The organization may be exposed to spoofing attacks and user confusion, which could impact trust in web applications.

Recommendation

It is recommended to update Firefox to version 115 or newer to mitigate the risks associated with this vulnerability.

Original NVD description (English source)

A website could prevent a user from exiting full-screen mode via alert and prompt calls. This could lead to user confusion and possible spoofing attacks. This vulnerability affects Firefox < 115.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS