CVE-2023-4053
MediumCVSS 6.5Exploitation Probability (EPSS)
Low risk47th percentile - higher than 47% of all known CVEs
Summary
The vulnerability allows a website to obscure the full screen notification by using a URL handled by an external program, which may lead to user confusion and potential spoofing attacks.
Risk Assessment
Organizations may be exposed to attacks that exploit user confusion, potentially leading to data disclosure or unauthorized access.
Recommendation
It is recommended to update Firefox to version 116 or newer and Thunderbird to version 115.2 or newer to mitigate the risk associated with this vulnerability.
Original NVD description (English source)
A website could have obscured the full screen notification by using a URL with a scheme handled by an external program, such as a mailto URL. This could have led to user confusion and possible spoofing attacks. This vulnerability affects Firefox < 116, Firefox ESR < 115.2, and Thunderbird < 115.2.