CVE-2023-4051

HighCVSS 7.5

Published: 01/08/2023(UTC)Updated: 17/06/2026(UTC)Translated: 18/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.55%

42th percentile - higher than 42% of all known CVEs

Summary

The vulnerability allows a website to obscure the full screen notification using the file open dialog, potentially leading to user confusion and possible spoofing attacks.

Risk Assessment

Organizations may be exposed to attacks that exploit this vulnerability to mislead users, potentially resulting in data theft or other malicious actions.

Recommendation

It is recommended to update Firefox browsers to version 116 or newer and Thunderbird to version 115.2 or newer to mitigate the risks associated with this vulnerability.

Other vulnerabilities in Firefox < 116, Firefox ESR < 115.2, Thunderbird < 115.2

CVE-2023-4053Medium
The vulnerability allows a website to obscure the full screen notification by using a URL handled by an external program, which may lead to user confusion and potential spoofing attacks.

Original NVD description (English source)

A website could have obscured the full screen notification by using the file open dialog. This could have led to user confusion and possible spoofing attacks. This vulnerability affects Firefox < 116, Firefox ESR < 115.2, and Thunderbird < 115.2.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS