CVE-2023-4579

—

CVSS 3.1

3.1 low

EPSS

<1%p38

Published

Sep 11, 2023 (Sep 11, 2023)

Modified

Jun 17, 2026

Description

Search queries in the default search engine could appear to have been the currently navigated URL if the search query itself was a well formed URL. This could have led to a site spoofing another if it had been maliciously set as the default search engine. This vulnerability affects Firefox < 117.

Vendors: mozilla
Products: firefox
Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N

NVD CVE.org GitHub PoCs EPSS (0.5%)

In the news0 stories

No ingested article mentions this CVE yet.