CVE-2023-23599

When copying a network request from the developer tools panel as a curl command the output was not being properly sanitized and could allow arbitrary commands to be hidden within. This vulnerability affects Firefox < 109, Firefox ESR < 102.7, and Thunderbird < 102.7.

CVSS v3 6.5 MEDIUM

6.5^/10

CVSS v3 : MEDIUM

Vector :

Exploitability : 2.8 / Impact : 3.6

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction REQUIRED

Confidentiality Impact NONE

Integrity Impact HIGH

Availability Impact NONE

Scope UNCHANGED

References

Link	Resource
https://bugzilla.mozilla.org/show_bug.cgi?id=1777800	Issue Tracking Permissions Required Vendor Advisory
https://www.mozilla.org/security/advisories/mfsa2023-01/	Vendor Advisory
https://www.mozilla.org/security/advisories/mfsa2023-02/	Vendor Advisory
https://www.mozilla.org/security/advisories/mfsa2023-03/	Vendor Advisory
https://bugzilla.mozilla.org/show_bug.cgi?id=1777800	Issue Tracking Permissions Required Vendor Advisory
https://www.mozilla.org/security/advisories/mfsa2023-01/	Vendor Advisory
https://www.mozilla.org/security/advisories/mfsa2023-02/	Vendor Advisory
https://www.mozilla.org/security/advisories/mfsa2023-03/	Vendor Advisory

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:mozilla:firefox::::::::
	cpe:2.3:a:mozilla:firefox_esr::::::::
	cpe:2.3:a:mozilla:thunderbird::::::::

History

24 Oct 2026, 13:10

Type	Values Removed	Values Added
Summary		(es) Al copiar una solicitud de red desde el panel de herramientas de desarrollador como un comando curl, la salida no estaba siendo correctamente saneada y podría permitir que comandos arbitrarios se ocultaran en su interior. Esta vulnerabilidad afecta a Firefox menor que 109, Firefox ESR anterior a 102.7 y Thunderbird anterior a 102.7.

Information

Published : 2023-06-02 17:15

Updated : 2026-10-24 13:10

NVD link : CVE-2023-23599

Mitre link : CVE-2023-23599

CVE.ORG link : CVE-2023-23599

JSON object : View

Products Affected

mozilla

firefox
firefox_esr
thunderbird

CWE

CWE-116

Improper Encoding or Escaping of Output

{"id": "CVE-2023-23599", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2023-23599", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "version": "2.0.3", "timestamp": "2025-01-09T16:21:01.314255Z"}}], "cvssMetricV31": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 6.5, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N", "integrityImpact": "HIGH", "userInteraction": "REQUIRED", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}, "impactScore": 3.6, "exploitabilityScore": 2.8}]}, "affected": [{"source": "security@mozilla.org", "affectedData": [{"vendor": "Mozilla", "product": "Firefox", "versions": [{"status": "affected", "version": "unspecified", "lessThan": "109", "versionType": "custom"}]}, {"vendor": "Mozilla", "product": "Firefox ESR", "versions": [{"status": "affected", "version": "unspecified", "lessThan": "102.7", "versionType": "custom"}]}, {"vendor": "Mozilla", "product": "Thunderbird", "versions": [{"status": "affected", "version": "unspecified", "lessThan": "102.7", "versionType": "custom"}]}]}], "published": "2023-06-02T17:15:10.627", "references": [{"url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1777800", "tags": ["Issue Tracking", "Permissions Required", "Vendor Advisory"], "source": "security@mozilla.org"}, {"url": "https://www.mozilla.org/security/advisories/mfsa2023-01/", "tags": ["Vendor Advisory"], "source": "security@mozilla.org"}, {"url": "https://www.mozilla.org/security/advisories/mfsa2023-02/", "tags": ["Vendor Advisory"], "source": "security@mozilla.org"}, {"url": "https://www.mozilla.org/security/advisories/mfsa2023-03/", "tags": ["Vendor Advisory"], "source": "security@mozilla.org"}, {"url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1777800", "tags": ["Issue Tracking", "Permissions Required", "Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://www.mozilla.org/security/advisories/mfsa2023-01/", "tags": ["Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://www.mozilla.org/security/advisories/mfsa2023-02/", "tags": ["Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://www.mozilla.org/security/advisories/mfsa2023-03/", "tags": ["Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-116"}]}], "descriptions": [{"lang": "en", "value": "When copying a network request from the developer tools panel as a curl command the output was not being properly sanitized and could allow arbitrary commands to be hidden within. This vulnerability affects Firefox < 109, Firefox ESR < 102.7, and Thunderbird < 102.7."}, {"lang": "es", "value": "Al copiar una solicitud de red desde el panel de herramientas de desarrollador como un comando curl, la salida no estaba siendo correctamente saneada y podr\u00eda permitir que comandos arbitrarios se ocultaran en su interior. Esta vulnerabilidad afecta a Firefox menor que 109, Firefox ESR anterior a 102.7 y Thunderbird anterior a 102.7."}], "lastModified": "2026-10-24T13:10:00.147", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "2809632C-444A-49A3-A7E7-D3BB027A91B8", "versionEndExcluding": "109.0"}, {"criteria": "cpe:2.3:a:mozilla:firefox_esr:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "1D5D3545-44B1-4576-B1BA-C461D4DC09A3", "versionEndExcluding": "102.7"}, {"criteria": "cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "E73E816A-885B-49D4-BB52-220D30866D7C", "versionEndExcluding": "102.7"}], "operator": "OR"}]}], "sourceIdentifier": "security@mozilla.org"}