CVE-2023-4045
MediumCVSS 5.3Exploitation Probability (EPSS)
Low risk41th percentile - higher than 41% of all known CVEs
Summary
CVE-2023-4045 concerns improper tracking of cross-origin tainting in Offscreen Canvas, which could allow unauthorized access to image data from other sites, violating same-origin policy.
Risk Assessment
Organizations may be exposed to data leaks from other sources, potentially leading to user privacy violations and legal consequences.
Recommendation
It is recommended to update Firefox to version 116 or later and Firefox ESR to version 102.14 or 115.1 to mitigate this vulnerability.
Original NVD description (English source)
Offscreen Canvas did not properly track cross-origin tainting, which could have been used to access image data from another site in violation of same-origin policy. This vulnerability affects Firefox < 116, Firefox ESR < 102.14, and Firefox ESR < 115.1.