CVE-2023-25731

HighCVSS 8.8/10Last modified Jun 17, 2026

Description

Due to URL previews in the network panel of developer tools improperly storing URLs, query parameters could potentially be used to overwrite global objects in privileged code. This vulnerability affects Firefox < 110.

Metrics

CVSS 3.1 8.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-1284

Affected software

Vendor	Product	Versions
Mozilla	Firefox	>= unspecified, < 110

References

https://bugzilla.mozilla.org/show_bug.cgi?id=1801542Issue Tracking, Permissions Required
https://www.mozilla.org/security/advisories/mfsa2023-05/Vendor Advisory
https://bugzilla.mozilla.org/show_bug.cgi?id=1801542Issue Tracking, Permissions Required
https://www.mozilla.org/security/advisories/mfsa2023-05/Vendor Advisory
https://bugzilla.mozilla.org/show_bug.cgi?id=1801542Issue Tracking, Permissions Required

Timeline

Published: Jun 2, 2023
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2023

CVE-2023-257328.8When encoding data from an <code>inputStream</code> in <code>xpcom</code> the size of the input being encoded was not correctly calculated p CVE-2023-257337.5The return value from `gfx::SourceSurfaceSkia::Map()` wasn't being verified which could have potentially lead to a null pointer dereference.CVE-2023-257348.1After downloading a Windows <code>.url</code> shortcut from the local filesystem, an attacker could supply a remote path that would lead to CVE-2023-257358.8Cross-compartment wrappers wrapping a scripted proxy could have caused objects from other compartments to be stored in the main compartment CVE-2023-257369.8An invalid downcast from `nsHTMLDocument` to `nsIContent` could have lead to undefined behavior. This vulnerability affects Firefox < 110.CVE-2023-257378.8An invalid downcast from <code>nsTextNode</code> to <code>SVGElement</code> could have lead to undefined behavior. This vulnerability affect CVE-2023-257386.5Members of the <code>DEVMODEW</code> struct set by the printer device driver weren't being validated and could have resulted in invalid valu CVE-2023-257398.8Module load requests that failed were not being checked as to whether or not they were cancelled causing a use-after-free in <code>ScriptLoa CVE-2023-25748.8Advantech EKI-1524, EKI-1522, EKI-1521 devices through 1.21 are affected by an command injection vulnerability in the device name input fiel CVE-2023-257408.8After downloading a Windows <code>.scf</code> script from the local filesystem, an attacker could supply a remote path that would lead to un CVE-2023-257416.5When dragging and dropping an image cross-origin, the image's size could potentially be leaked. This behavior was shipped in 109 and caused CVE-2023-257426.5When importing a SPKI RSA public key as ECDSA P-256, the key would be handled incorrectly causing the tab to crash. This vulnerability affec