CVE:CVE-2023-28163
CNNVD:CNNVD-202303-1104
Mozilla Firefox是美国Mozilla基金会的一款开源Web浏览器。
Mozilla Firefox 111版本存在安全漏洞。攻击者利用该漏洞在当前用户环境中解析包含环境变量名称的文件。
solution:Upgrade mozilla firefox to a higher version than 111.0,and avoid the version (,111.0); Upgrade mozilla firefox_esr to a higher version than 102.9,and avoid the version (,102.9); Upgrade mozilla thunderbird to a higher version than 102.9,and avoid the version (,102.9)