CVE:CVE-2023-25734
CNNVD:CNNVD-202306-126
Mozilla Firefox是美国Mozilla基金会的一款开源Web浏览器。
Mozilla Firefox 110之前版本存在安全漏洞，该漏洞源于从本地文件系统下载Windows. url快捷方式后，攻击者可以提供远程路径，从而导致来自操作系统的意外网络请求。
solution:Upgrade mozilla firefox to a higher version than 110.0,and avoid the version (,110.0); Upgrade mozilla firefox_esr to a higher version than 102.8,and avoid the version (,102.8); Upgrade mozilla thunderbird to a higher version than 102.8,and avoid the version (,102.8)