CVE-2023-5729

CVSS 3.1 Score 4.3 of 10 (medium)

Details

Published Oct 25, 2023
Updated: Jan 7, 2024

Summary

CVE-2023-5729 is a vulnerability that affects Firefox versions below 119. Maliciously crafted websites can enter fullscreen mode simultaneously with a WebAuthn prompt, potentially obscuring the fullscreen notification. This issue could be exploited in spoofing attacks by taking advantage of the user's focus on the prompt, making it difficult for them to notice the fullscreen transition. Users are advised to update their Firefox browsers to mitigate this risk.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share