Insufficient validation in the Drag and Drop API in conjunction with social engineering, may have allowed an attacker to trick end-users into creating a shortcut to local system files. This could have been leveraged to execute arbitrary code. This vulnerability affects Firefox < 115.
Metrics
Affected Vendors & Products
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: mozilla
Published: 2023-07-05T09:01:27.313Z
Updated: 2024-08-02T17:09:32.935Z
Reserved: 2023-06-28T18:07:02.265Z
Link: CVE-2023-37203
Vulnrichment
No data.
NVD
Status : Modified
Published: 2023-07-05T10:15:09.687
Modified: 2024-01-07T11:15:12.023
Link: CVE-2023-37203
Redhat
No data.