Vulnerability CVE-2023-5732: Information

Description

An attacker could have created a malicious link using bidirectional characters to spoof the location in the address bar when visited. This vulnerability affects Firefox < 117, Firefox ESR < 115.4, and Thunderbird < 115.4.1.

Severity: MEDIUM (6.5) Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

URL: https://nvd.nist.gov/vuln/detail/CVE-2023-5732

Published: Oct. 25, 2023

Modified: Nov. 1, 2023

Fixed packages

Package name	Branch	Fixed in version	Version from repository	Errata ID	Task #	State
firefox	p10	118.0.2-alt0.p10.1	118.0.2-alt0.p10.1	ALT-PU-2024-4241-4	342418	Fixed
firefox-esr	sisyphus	115.4.0-alt1	115.11.0-alt1	ALT-PU-2023-6883-2	333443	Fixed
firefox-esr	p10	115.4.0-alt1	115.11.0-alt1	ALT-PU-2023-6908-3	333444	Fixed
firefox-esr	c10f1	115.8.0-alt0.c10.1	115.9.1-alt0.c10.1	ALT-PU-2024-3614-2	340631	Fixed
firefox-esr	p11	115.4.0-alt1	115.11.0-alt1	ALT-PU-2023-6883-2	333443	Fixed
thunderbird	sisyphus	115.4.1-alt1	115.9.0-alt1	ALT-PU-2023-6856-2	333372	Fixed
thunderbird	p10	115.8.1-alt1	115.9.0-alt1	ALT-PU-2024-3860-2	342581	Fixed
thunderbird	c10f1	115.8.1-alt0.c10.1	115.9.0-alt0.c10.1	ALT-PU-2024-4748-2	343092	Fixed
thunderbird	p11	115.4.1-alt1	115.9.0-alt1	ALT-PU-2023-6856-2	333372	Fixed

References to Advisories, Solutions, and Tools

Hyperlink	Resource
https://www.mozilla.org/security/advisories/mfsa2023-34/	Vendor Advisory
https://www.mozilla.org/security/advisories/mfsa2023-47/	Vendor Advisory
https://www.mozilla.org/security/advisories/mfsa2023-46/	Vendor Advisory
https://bugzilla.mozilla.org/show_bug.cgi?id=1690979	Issue Tracking Vendor Advisory
https://bugzilla.mozilla.org/show_bug.cgi?id=1836962	Issue Tracking Vendor Advisory
https://www.debian.org/security/2023/dsa-5535	Mailing List Third Party Advisory
https://lists.debian.org/debian-lts-announce/2023/10/msg00037.html	Mailing List Third Party Advisory
https://www.debian.org/security/2023/dsa-5538	Third Party Advisory
https://lists.debian.org/debian-lts-announce/2023/10/msg00042.html	Mailing List Third Party Advisory

Affected configurations:
1. Configuration 1
  cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*
  End excliding
  117.0
  cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*
  End excliding
  115.4.1
  cpe:2.3:a:mozilla:firefox_esr:*:*:*:*:*:*:*:*
  End excliding
  115.4.1
  
  Configuration 2
  cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*
  cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:*

Version: v24.5.3

Vulnerability CVE-2023-5732: Information

Description

Fixed packages

References to Advisories, Solutions, and Tools

Configuration 1

Configuration 2