Início
Início
Tendências
Tendências
Vulnerabilidades
Vulnerabilidades
Notícias
Notícias
Pesquisadores
Pesquisadores
Por que dbugs?
Por que dbugs?
Configurações

Godson Bastin

#36010de 56,335
7.8CVSS total
Vulnerabilidades · 1
PT-2023-7293
7.8
2023-11-21
Mozilla · Firefox · CVE-2023-6210
**Name of the Vulnerable Software and Affected Versions** Firefox versions prior to 120 **Description** The issue is related to a browser vulnerability that can lead to the redirection of URLs to untrusted sites, potentially allowing remote attackers to conduct phishing attacks using specially crafted malicious links. It is also noted that when an HTTPS web page creates a pop-up from a "javascript:" URL, the pop-up is incorrectly allowed to load blockable content, such as iframes from insecure HTTP URLs. **Recommendations** For versions prior to 120, update to version 120 or later to resolve the issue. As a temporary workaround, consider restricting the use of pop-ups from "javascript:" URLs to minimize the risk of exploitation. Avoid using insecure HTTP URLs in iframes within HTTPS web pages until the issue is resolved.