{
  "cveId": "CVE-2023-25731",
  "url": "https://patchblox.com/security/cve/CVE-2023-25731",
  "summary": "CVE-2023-25731 is fixed in 5 products on 2 platforms, first by firefox 110.0\u002Bbuild3-0ubuntu0.18.04.1, released February 14, 2023. It is not reported as exploited. Patch Radar priority: High.",
  "title": "Mozilla Firefox and 2 others: Improper Validation of Specified Quantity in Input",
  "description": "Due to URL previews in the network panel of developer tools improperly storing URLs, query parameters could potentially be used to overwrite global objects in privileged code. This vulnerability affects Firefox \u003C 110.",
  "published": "2023-02-14T16:00:00Z",
  "severity": "Medium",
  "cvss": 8.8,
  "cwe": "CWE-1284: Improper Validation of Specified Quantity in Input",
  "epss": 0.00557,
  "epssPercentile": 0.46681,
  "priority": "High",
  "priorityTier": 3,
  "exploited": false,
  "vendorExploited": false,
  "disclosed": false,
  "vendorAdvisory": "https://nvd.nist.gov/vuln/detail/CVE-2023-25731",
  "fixes": [
    {
      "platform": "windows-app",
      "product": "Mozilla Firefox (en-US)",
      "fixedVersion": "110.0",
      "fix": "Mozilla Firefox (en-US) 110.0",
      "url": "https://patchblox.com/security/fix/windows-app/mozilla.firefox-110.0",
      "released": "2023-02-16T00:00:00Z"
    },
    {
      "platform": "windows-app",
      "product": "Mozilla Firefox ESR (en-US)",
      "fixedVersion": "115.4.0",
      "fix": "Mozilla Firefox ESR (en-US) 115.4.0",
      "url": "https://patchblox.com/security/fix/windows-app/mozilla.firefox.esr-115.4.0",
      "released": "2023-10-17T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "firefox",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "110.0\u002Bbuild3-0ubuntu0.18.04.1",
      "fix": "firefox 110.0\u002Bbuild3-0ubuntu0.18.04.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-firefox-110.0-build3-0ubuntu0.18.04.1",
      "released": "2023-02-14T16:00:00Z"
    },
    {
      "platform": "linux",
      "product": "firefox",
      "release": "Ubuntu 20.04 LTS (focal)",
      "fixedVersion": "110.0\u002Bbuild3-0ubuntu0.20.04.1",
      "fix": "firefox 110.0\u002Bbuild3-0ubuntu0.20.04.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-focal-firefox-110.0-build3-0ubuntu0.20.04.1",
      "released": "2023-02-14T16:00:00Z"
    },
    {
      "platform": "linux",
      "product": "firefox-geckodriver",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "110.0\u002Bbuild3-0ubuntu0.18.04.1",
      "fix": "firefox-geckodriver 110.0\u002Bbuild3-0ubuntu0.18.04.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-firefox-geckodriver-110.0-build3-0ubuntu0.18.04.1",
      "released": "2023-02-14T16:00:00Z"
    },
    {
      "platform": "linux",
      "product": "firefox-geckodriver",
      "release": "Ubuntu 20.04 LTS (focal)",
      "fixedVersion": "110.0\u002Bbuild3-0ubuntu0.20.04.1",
      "fix": "firefox-geckodriver 110.0\u002Bbuild3-0ubuntu0.20.04.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-focal-firefox-geckodriver-110.0-build3-0ubuntu0.20.04.1",
      "released": "2023-02-14T16:00:00Z"
    },
    {
      "platform": "linux",
      "product": "firefox-mozsymbols",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "110.0\u002Bbuild3-0ubuntu0.18.04.1",
      "fix": "firefox-mozsymbols 110.0\u002Bbuild3-0ubuntu0.18.04.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-firefox-mozsymbols-110.0-build3-0ubuntu0.18.04.1",
      "released": "2023-02-14T16:00:00Z"
    },
    {
      "platform": "linux",
      "product": "firefox-mozsymbols",
      "release": "Ubuntu 20.04 LTS (focal)",
      "fixedVersion": "110.0\u002Bbuild3-0ubuntu0.20.04.1",
      "fix": "firefox-mozsymbols 110.0\u002Bbuild3-0ubuntu0.20.04.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-focal-firefox-mozsymbols-110.0-build3-0ubuntu0.20.04.1",
      "released": "2023-02-14T16:00:00Z"
    }
  ],
  "noFixYet": [],
  "dataAsOf": "2026-11-09T07:25:28Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}