CVE-2023-23604 — Creation of duplicate SystemPrincipal from less secure contexts

CVE-2023-23604

Creation of duplicate SystemPrincipal from less secure contexts PUBLISHED

Description (CNA)

A duplicate `SystemPrincipal` object could be created when parsing a non-system html document via `DOMParser::ParseFromSafeString`. This could have lead to bypassing web security checks. This vulnerability affects Firefox < 109.

Affected (CNA)

Vendor / product	Versions
Mozilla / Firefox	affected unspecified before 109

CWE

No CWE identifiers supplied.

References

https://bugzilla.mozilla.org/show_bug.cgi?id=1802346
https://www.mozilla.org/security/advisories/mfsa2023-01/

ADP enrichment

CVE

No English description supplied.

https://www.mozilla.org/security/advisories/mfsa2023-01/
https://bugzilla.mozilla.org/show_bug.cgi?id=1802346

CISA-ADP

No English description supplied.

No references supplied.