CVE:CVE-2023-4045
CNNVD:CNNVD-202308-001
Mozilla Firefox是美国Mozilla基金会的一款开源Web浏览器。
Mozilla Firefox 116 版本存在安全漏洞，该漏洞源于 Offscreen Canvas 无法正确跟踪跨源污染，这可能被用来从另一个站点访问图像数据，从而违反了同源策略。
solution:Upgrade mozilla firefox to a higher version than 116.0,and avoid the version (,116.0); Upgrade mozilla firefox_esr to a higher version than 102.14,115.1,and avoid the version [102.0,102.14),[115.0,115.1); Upgrade debian debian_linux to a higher version than 11.0,12.0,and avoid the version 11.0,12.0