CVEvulnerability
CVE-2023-25741
6.5 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2023-06-02
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 6.5 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
- CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0)
- 6.5 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
- Weaknesses
- CWE-203
Description
When dragging and dropping an image cross-origin, the image's size could potentially be leaked. This behavior was shipped in 109 and caused web compatibility problems as well as this security concern, so the behavior was disabled until further review. This vulnerability affects Firefox < 110.
Affected configurations
• mozilla firefox (< 110.0)
Related
Weakness · CWE (1)
- CWE-203 Observable Discrepancy weakness
References
- https://bugzilla.mozilla.org/show_bug.cgi?id=1437126 Issue Tracking, Vendor Advisory
- https://bugzilla.mozilla.org/show_bug.cgi?id=1812611 Exploit, Issue Tracking, Vendor Advisory
- https://bugzilla.mozilla.org/show_bug.cgi?id=1813376 Issue Tracking, Permissions Required
- https://www.mozilla.org/security/advisories/mfsa2023-05/ Vendor Advisory
- https://bugzilla.mozilla.org/show_bug.cgi?id=1437126 Issue Tracking, Vendor Advisory
- https://bugzilla.mozilla.org/show_bug.cgi?id=1812611 Exploit, Issue Tracking, Vendor Advisory
- https://bugzilla.mozilla.org/show_bug.cgi?id=1813376 Issue Tracking, Permissions Required
- https://www.mozilla.org/security/advisories/mfsa2023-05/ Vendor Advisory