{
  "cveId": "CVE-2023-25741",
  "url": "https://patchblox.com/security/cve/CVE-2023-25741",
  "summary": "CVE-2023-25741 is fixed in 5 products on 2 platforms, first by firefox 110.0\u002Bbuild3-0ubuntu0.18.04.1, released February 14, 2023. It is not reported as exploited. Patch Radar priority: Routine.",
  "title": "Mozilla Firefox and 2 others: Observable Discrepancy",
  "description": "When dragging and dropping an image cross-origin, the image\u0027s size could potentially be leaked. This behavior was shipped in 109 and caused web compatibility problems as well as this security concern, so the behavior was disabled until further review. This vulnerability affects Firefox \u003C 110.",
  "published": "2023-02-14T16:00:00Z",
  "severity": "Medium",
  "cvss": 6.5,
  "cwe": "CWE-203: Observable Discrepancy",
  "epss": 0.00767,
  "epssPercentile": 0.55763,
  "priority": "Routine",
  "priorityTier": 4,
  "exploited": false,
  "vendorExploited": false,
  "disclosed": false,
  "vendorAdvisory": "https://nvd.nist.gov/vuln/detail/CVE-2023-25741",
  "fixes": [
    {
      "platform": "windows-app",
      "product": "Mozilla Firefox (en-US)",
      "fixedVersion": "110.0",
      "fix": "Mozilla Firefox (en-US) 110.0",
      "url": "https://patchblox.com/security/fix/windows-app/mozilla.firefox-110.0",
      "released": "2023-02-16T00:00:00Z"
    },
    {
      "platform": "windows-app",
      "product": "Mozilla Firefox ESR (en-US)",
      "fixedVersion": "115.4.0",
      "fix": "Mozilla Firefox ESR (en-US) 115.4.0",
      "url": "https://patchblox.com/security/fix/windows-app/mozilla.firefox.esr-115.4.0",
      "released": "2023-10-17T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "firefox",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "110.0\u002Bbuild3-0ubuntu0.18.04.1",
      "fix": "firefox 110.0\u002Bbuild3-0ubuntu0.18.04.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-firefox-110.0-build3-0ubuntu0.18.04.1",
      "released": "2023-02-14T16:00:00Z"
    },
    {
      "platform": "linux",
      "product": "firefox",
      "release": "Ubuntu 20.04 LTS (focal)",
      "fixedVersion": "110.0\u002Bbuild3-0ubuntu0.20.04.1",
      "fix": "firefox 110.0\u002Bbuild3-0ubuntu0.20.04.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-focal-firefox-110.0-build3-0ubuntu0.20.04.1",
      "released": "2023-02-14T16:00:00Z"
    },
    {
      "platform": "linux",
      "product": "firefox-geckodriver",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "110.0\u002Bbuild3-0ubuntu0.18.04.1",
      "fix": "firefox-geckodriver 110.0\u002Bbuild3-0ubuntu0.18.04.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-firefox-geckodriver-110.0-build3-0ubuntu0.18.04.1",
      "released": "2023-02-14T16:00:00Z"
    },
    {
      "platform": "linux",
      "product": "firefox-geckodriver",
      "release": "Ubuntu 20.04 LTS (focal)",
      "fixedVersion": "110.0\u002Bbuild3-0ubuntu0.20.04.1",
      "fix": "firefox-geckodriver 110.0\u002Bbuild3-0ubuntu0.20.04.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-focal-firefox-geckodriver-110.0-build3-0ubuntu0.20.04.1",
      "released": "2023-02-14T16:00:00Z"
    },
    {
      "platform": "linux",
      "product": "firefox-mozsymbols",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "110.0\u002Bbuild3-0ubuntu0.18.04.1",
      "fix": "firefox-mozsymbols 110.0\u002Bbuild3-0ubuntu0.18.04.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-firefox-mozsymbols-110.0-build3-0ubuntu0.18.04.1",
      "released": "2023-02-14T16:00:00Z"
    },
    {
      "platform": "linux",
      "product": "firefox-mozsymbols",
      "release": "Ubuntu 20.04 LTS (focal)",
      "fixedVersion": "110.0\u002Bbuild3-0ubuntu0.20.04.1",
      "fix": "firefox-mozsymbols 110.0\u002Bbuild3-0ubuntu0.20.04.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-focal-firefox-mozsymbols-110.0-build3-0ubuntu0.20.04.1",
      "released": "2023-02-14T16:00:00Z"
    }
  ],
  "noFixYet": [],
  "dataAsOf": "2026-11-08T19:12:23Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}