Skip to content
CVE PROGRAM SOURCE RECORD6.5 Medium

CVE-2023-23604

Creation of duplicate SystemPrincipal from less secure contexts

Description

A duplicate `SystemPrincipal` object could be created when parsing a non-system html document via `DOMParser::ParseFromSafeString`. This could have lead to bypassing web security checks. This vulnerability affects Firefox < 109.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Mozilla Firefox

  • unspecified to < 109affected

References