CVE-2023-32212

CVE Database · CVE-2023-32212

CVE-2023-32212

· MEDIUMModified

CVSS v3.1

4.3

EPSS

0.65%

Published

Jun 2, 2023

Modified

May 27, 2025

Public PoC / Exploit (1)

All weaponized →

TrickestTrickest PoC index

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

An attacker could have positioned a `datalist` element to obscure the address bar. This vulnerability affects Firefox < 113, Firefox ESR < 102.11, and Thunderbird < 102.11.

CVSS Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

Affected Products (3)

mozilla · firefox (up to 113.0)vulnerable

mozilla · firefox_esr (up to 102.11)vulnerable

mozilla · thunderbird (up to 102.11)vulnerable

References (12)

https://bugzilla.mozilla.org/show_bug.cgi?id=1826622

Issue TrackingPermissions RequiredVendor Advisory

https://security.gentoo.org/glsa/202312-03

https://security.gentoo.org/glsa/202401-10

https://www.mozilla.org/security/advisories/mfsa2023-16/

Vendor Advisory

https://www.mozilla.org/security/advisories/mfsa2023-17/

Vendor Advisory

https://www.mozilla.org/security/advisories/mfsa2023-18/

Vendor Advisory

https://bugzilla.mozilla.org/show_bug.cgi?id=1826622

Issue Tracking

KEV Catalog EPSS Scores Vendors All CVEs