CVE-2023-6869

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 121

Description A <dialog> element could have been manipulated to paint content outside of a sandboxed iframe, allowing untrusted content to display under the guise of trusted content. The vulnerability is related to errors in interpreting data and could be exploited by a remote attacker to bypass existing security restrictions.

Recommendations For versions prior to 121, update to version 121 or later to resolve the issue. As a temporary workaround, consider restricting the use of the <dialog> element in sandboxed iframes until a patch is available.