Back to search
CVE-2023-23597
Published: Jun 2, 2023
Modified: Dec 18, 2025
PUBLISHED
Description
A compromised web child process could disable web security opening restrictions, leading to a new child process being spawned within the `file://` context. Given a reliable exploit primitive, this new process could be exploited again leading to arbitrary file read. This vulnerability affects Firefox < 109.
| Vendor | Product | Versions |
|---|---|---|
Mozilla | Firefox | affected unspecified - < 109 |
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now