Security Advisory
CVE-2023-25740
8.8
HIGH
Vulnerability Description
After downloading a Windows
*This bug only affects Firefox for Windows. Other operating systems are unaffected.*. This vulnerability affects Firefox < 110.
.scf script from the local filesystem, an attacker could supply a remote path that would lead to unexpected network requests from the operating system. This also had the potential to leak NTLM credentials to the resource.*This bug only affects Firefox for Windows. Other operating systems are unaffected.*. This vulnerability affects Firefox < 110.
Published Date
June 2, 2023
Official Source
NIST NVD Advisory