PT-2023-3727

CVE-2023-37205

·

Published

2023-07-04

·

Updated

2026-10-30

Description by

CVSS 2.0
7.8
High
MetricsAV:N/AC:L/Au:N/C:N/I:C/A:N
Name of the Vulnerable Software and Affected Versions Mozilla Firefox versions prior to 115
Description The issue is related to errors in the representation of information by the user interface, specifically with the RTL Arabic Character Handler component. It may allow a remote attacker to conduct spoofing attacks using a specially crafted web page. The use of RTL Arabic characters in the address bar may have allowed for URL spoofing.
Recommendations For versions prior to 115, update to version 115 or later to resolve the issue. As a temporary workaround, consider avoiding the use of RTL Arabic characters in the address bar until the update is applied. Restrict access to potentially vulnerable web pages to minimize the risk of exploitation.
Exploitability
Exploit
Fix
Impacts
Researchers
Vendors
Affected products
Related identifiers
ALT-PU-2023-4102
ALT-PU-2023-5754
ALT-PU-2023-6436
ALT-PU-2024-14035
ALT-PU-2024-3614
ALT-PU-2024-4241
CLEANSTART-2024-AJ72682
OESA-2025-1265
OESA-2025-1268
OPENSUSE-SU-2023_2886-1
OPENSUSE-SU-2024:13037-1
OPENSUSE-SU-2024:14572-1
SUSE-SU-2023:2849-1
SUSE-SU-2023:2850-1
SUSE-SU-2023:2886-1
USN-6201-1
Found an issue in the description? Have something to add? Feel free to write us 👾