CVE-2023-23600

Published: 18 January 2023

Per origin notification permissions were being stored in a way that didn't take into account what browsing context the permission was granted in. This lead to the possibility of notifications to be displayed during different browsing sessions.<br>*This bug only affects Firefox for Android. Other operating systems are unaffected.*. This vulnerability affects Firefox < 109.

Notes

mozjs contains a copy of the SpiderMonkey JavaScript engine

starting with Ubuntu 22.04, the firefox package is just a script
that installs the Firefox snap

Status

References

• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-23600
• https://www.mozilla.org/en-US/security/advisories/mfsa2023-01/#CVE-2023-23600
• NVD
• Launchpad
• Debian