Mend.io Vulnerability Database

What is a CVE vulnerability ID? icon What is a WS vulnerability ID? icon What is an MSC vulnerability ID? icon
New vulnerability? Tell us about it!
icon

We found results for “”

CVE-2023-6206

Date: November 21, 2023

The black fade animation when exiting fullscreen is roughly the length of the anti-clickjacking delay on permission prompts. It was possible to use this fact to surprise users by luring them to click where the permission grant button would be about to appear. This vulnerability affects Firefox < 120, Firefox ESR < 115.5.0, and Thunderbird < 115.5.

Language: JS

Severity Score

Related Resources (10)

https://nvd.nist.gov/vuln/detail/CVE-2023-6206
https://www.mozilla.org/security/advisories/mfsa2023-49/
https://security-tracker.debian.org/tracker/CVE-2023-6206
https://www.debian.org/security/2023/dsa-5561
https://lists.debian.org/debian-lts-announce/2023/11/msg00030.html
https://www.mozilla.org/security/advisories/mfsa2023-50/
https://www.mozilla.org/security/advisories/mfsa2023-52/
https://bugzilla.mozilla.org/show_bug.cgi?id=1857430
https://lists.debian.org/debian-lts-announce/2023/11/msg00017.html
https://www.mend.io/vulnerability-database/CVE-2023-6206

Severity Score

Weakness Type (CWE)

Improper Restriction of Rendered UI Layers or Frames

CWE-1021

CVSS v3.1

Base Score:
Attack Vector (AV): NETWORK
Attack Complexity (AC): LOW
Privileges Required (PR): NONE
User Interaction (UI): REQUIRED
Scope (S): UNCHANGED
Confidentiality (C): LOW
Integrity (I): LOW
Availability (A): NONE

Do you need more information?

Contact Us