CVE-2023-28163

MediumCVSS 6.5/10Last modified Oct 23, 2026

Description

When downloading files through the Save As dialog on Windows with suggested filenames containing environment variable names, Windows would have resolved those in the context of the current user. <br>*This bug only affects Firefox on Windows. Other versions of Firefox are unaffected.*. This vulnerability affects Firefox < 111, Firefox ESR < 102.9, and Thunderbird < 102.9.

Metrics

CVSS 3.1 6.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

Weakness enumeration

CWE-22

Affected software

Vendor	Product	Versions
Mozilla	Firefox	>= unspecified, < 111
Mozilla	Firefox ESR	>= unspecified, < 102.9
Mozilla	Thunderbird	>= unspecified, < 102.9

References

https://bugzilla.mozilla.org/show_bug.cgi?id=1817768Issue Tracking, Permissions Required, Vendor Advisory
https://www.mozilla.org/security/advisories/mfsa2023-09/Vendor Advisory
https://www.mozilla.org/security/advisories/mfsa2023-10/Vendor Advisory
https://www.mozilla.org/security/advisories/mfsa2023-11/Vendor Advisory
https://bugzilla.mozilla.org/show_bug.cgi?id=1817768Issue Tracking, Permissions Required, Vendor Advisory
https://www.mozilla.org/security/advisories/mfsa2023-09/Vendor Advisory
https://www.mozilla.org/security/advisories/mfsa2023-10/Vendor Advisory
https://www.mozilla.org/security/advisories/mfsa2023-11/Vendor Advisory
https://bugzilla.mozilla.org/show_bug.cgi?id=1817768Issue Tracking, Permissions Required, Vendor Advisory

Timeline

Published: Jun 2, 2023
Last modified: Oct 23, 2026
NVD status: Modified

Related CVEs from 2023

CVE-2023-281646.5Dragging a URL from a cross-origin iframe that was removed during the drag could have led to user confusion and website spoofing attacks. Th CVE-2023-281654.3Missing Authorization vulnerability in Tech Banker Backup Bank: WordPress Backup Plugin allows Exploiting Incorrectly Configured Access Cont CVE-2023-281666.1Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Aakif Kadiwala Tags Cloud Manager plugin <= 1.0.0 versions.CVE-2023-281678.8Cross-Site Request Forgery (CSRF) vulnerability in Vsourz Digital CF7 Invisible reCAPTCHA plugin <= 1.3.3 versions.CVE-2023-281683.7Missing Authorization vulnerability in Jerod Santo WordPress Console allows Exploiting Incorrectly Configured Access Control Security Levels CVE-2023-281694.8Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in CoreFortress Easy Event calendar plugin <= 1.0 versions.CVE-2023-28175.4A post-authentication stored cross-site scripting vulnerability exists in Craft CMS versions <= 4.4.11. HTML, including script tags can be i CVE-2023-281707.2Unrestricted Upload of File with Dangerous Type vulnerability in Themely Theme Demo Import.This issue affects Theme Demo Import: from n/a th CVE-2023-281715.4Auth. (subscriber+) Stored Cross-Site Scripting (XSS) vulnerability in WP Chill Brilliance theme <= 1.3.1 versions.CVE-2023-281728.8Cross-Site Request Forgery (CSRF) vulnerability in flippercode WordPress Plugin for Google Maps – WP MAPS (formerly WP Google Map Plugin) pl CVE-2023-281738.8Cross-Site Request Forgery (CSRF) vulnerability in Amit Agarwal Google XML Sitemap for Images plugin <= 2.1.3 versions.CVE-2023-281744.8Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in eLightUp eRocket plugin <= 1.2.4 versions.