CVE-2023-4047

A bug in popup notifications delay calculation could have made it possible for an attacker to trick a user into granting permissions. This vulnerability affects Firefox < 116, Firefox ESR < 102.14, and Firefox ESR < 115.1.

Affected products

Alt Linux, Almalinux, Astra Linux, Centos, Firefox, Linuxmint, Red Hat, Red Os

Mozilla Firefox

< 116.0, 102.14, 115.1

Fix

Available

CVSS 3.1

8.8 HIGH

EPSS

0.6% (48th percentile)

Weakness

CWE-352

NVD status

Modified

Published

2023-08-01