Unrated severityNVD Advisory· Published Jul 5, 2023· Updated Feb 13, 2025

CVE-2023-3482

Description

When Firefox is configured to block storage of all cookies, it was still possible to store data in localstorage by using an iframe with a source of 'about:blank'. This could have led to malicious websites storing tracking data without permission. This vulnerability affects Firefox < 115.

Affected products

osv-coords53 versions
pkg:rpm/opensuse/firefox-esr&distro=openSUSE%20Tumbleweed pkg:rpm/opensuse/MozillaFirefox-branding-SLE&distro=openSUSE%20Leap%2015.4 pkg:rpm/opensuse/MozillaFirefox-branding-SLE&distro=openSUSE%20Leap%2015.5 pkg:rpm/opensuse/MozillaFirefox&distro=openSUSE%20Leap%2015.4 pkg:rpm/opensuse/MozillaFirefox&distro=openSUSE%20Leap%2015.5 pkg:rpm/opensuse/MozillaFirefox&distro=openSUSE%20Tumbleweed pkg:rpm/suse/MozillaFirefox-branding-SLE&distro=SUSE%20Enterprise%20Storage%207 pkg:rpm/suse/MozillaFirefox-branding-SLE&distro=SUSE%20Enterprise%20Storage%207.1 pkg:rpm/suse/MozillaFirefox-branding-SLE&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP1-LTSS pkg:rpm/suse/MozillaFirefox-branding-SLE&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP2-LTSS pkg:rpm/suse/MozillaFirefox-branding-SLE&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP3-ESPOS pkg:rpm/suse/MozillaFirefox-branding-SLE&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP3-LTSS pkg:rpm/suse/MozillaFirefox-branding-SLE&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Desktop%20Applications%2015%20SP4 pkg:rpm/suse/MozillaFirefox-branding-SLE&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Desktop%20Applications%2015%20SP5 pkg:rpm/suse/MozillaFirefox-branding-SLE&distro=SUSE%20Linux%20Enterprise%20Real%20Time%2015%20SP3 pkg:rpm/suse/MozillaFirefox-branding-SLE&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP2-BCL pkg:rpm/suse/MozillaFirefox-branding-SLE&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP4-ESPOS pkg:rpm/suse/MozillaFirefox-branding-SLE&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP4-LTSS pkg:rpm/suse/MozillaFirefox-branding-SLE&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP5 pkg:rpm/suse/MozillaFirefox-branding-SLE&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP1-LTSS pkg:rpm/suse/MozillaFirefox-branding-SLE&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP2-LTSS pkg:rpm/suse/MozillaFirefox-branding-SLE&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP3-LTSS pkg:rpm/suse/MozillaFirefox-branding-SLE&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP4 pkg:rpm/suse/MozillaFirefox-branding-SLE&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP5 pkg:rpm/suse/MozillaFirefox-branding-SLE&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP1 pkg:rpm/suse/MozillaFirefox-branding-SLE&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP2 pkg:rpm/suse/MozillaFirefox-branding-SLE&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP3 pkg:rpm/suse/MozillaFirefox-branding-SLE&distro=SUSE%20OpenStack%20Cloud%209 pkg:rpm/suse/MozillaFirefox-branding-SLE&distro=SUSE%20OpenStack%20Cloud%20Crowbar%209 pkg:rpm/suse/MozillaFirefox&distro=SUSE%20Enterprise%20Storage%207 pkg:rpm/suse/MozillaFirefox&distro=SUSE%20Enterprise%20Storage%207.1 pkg:rpm/suse/MozillaFirefox&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP1-LTSS pkg:rpm/suse/MozillaFirefox&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP2-LTSS pkg:rpm/suse/MozillaFirefox&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP3-ESPOS pkg:rpm/suse/MozillaFirefox&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP3-LTSS pkg:rpm/suse/MozillaFirefox&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Desktop%20Applications%2015%20SP4 pkg:rpm/suse/MozillaFirefox&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Desktop%20Applications%2015%20SP5 pkg:rpm/suse/MozillaFirefox&distro=SUSE%20Linux%20Enterprise%20Real%20Time%2015%20SP3 pkg:rpm/suse/MozillaFirefox&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP2-BCL pkg:rpm/suse/MozillaFirefox&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP4-ESPOS pkg:rpm/suse/MozillaFirefox&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP4-LTSS pkg:rpm/suse/MozillaFirefox&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP5 pkg:rpm/suse/MozillaFirefox&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP1-LTSS pkg:rpm/suse/MozillaFirefox&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP2-LTSS pkg:rpm/suse/MozillaFirefox&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP3-LTSS pkg:rpm/suse/MozillaFirefox&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP4 pkg:rpm/suse/MozillaFirefox&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP5 pkg:rpm/suse/MozillaFirefox&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP1 pkg:rpm/suse/MozillaFirefox&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP2 pkg:rpm/suse/MozillaFirefox&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP3 pkg:rpm/suse/MozillaFirefox&distro=SUSE%20Linux%20Enterprise%20Software%20Development%20Kit%2012%20SP5 pkg:rpm/suse/MozillaFirefox&distro=SUSE%20OpenStack%20Cloud%209 pkg:rpm/suse/MozillaFirefox&distro=SUSE%20OpenStack%20Cloud%20Crowbar%209
< 128.5.1-1.1+ 52 more
- (no CPE)range: < 128.5.1-1.1
- (no CPE)range: < 115-150200.9.13.1
- (no CPE)range: < 115-150200.9.13.1
- (no CPE)range: < 115.0-150200.152.93.1
- (no CPE)range: < 115.0-150200.152.93.1
- (no CPE)range: < 115.0-1.1
- (no CPE)range: < 115-150200.9.13.1
- (no CPE)range: < 115-150200.9.13.1
- (no CPE)range: < 115-150000.4.25.1
- (no CPE)range: < 115-150200.9.13.1
- (no CPE)range: < 115-150200.9.13.1
- (no CPE)range: < 115-150200.9.13.1
- (no CPE)range: < 115-150200.9.13.1
- (no CPE)range: < 115-150200.9.13.1
- (no CPE)range: < 115-150200.9.13.1
- (no CPE)range: < 115-35.12.2
- (no CPE)range: < 115-35.12.2
- (no CPE)range: < 115-35.12.2
- (no CPE)range: < 115-35.12.2
- (no CPE)range: < 115-150000.4.25.1
- (no CPE)range: < 115-150200.9.13.1
- (no CPE)range: < 115-150200.9.13.1
- (no CPE)range: < 115-35.12.2
- (no CPE)range: < 115-35.12.2
- (no CPE)range: < 115-150000.4.25.1
- (no CPE)range: < 115-150200.9.13.1
- (no CPE)range: < 115-150200.9.13.1
- (no CPE)range: < 115-35.12.2
- (no CPE)range: < 115-35.12.2
- (no CPE)range: < 115.0-150200.152.93.1
- (no CPE)range: < 115.0-150200.152.93.1
- (no CPE)range: < 115.0-150000.150.91.1
- (no CPE)range: < 115.0-150200.152.93.1
- (no CPE)range: < 115.0-150200.152.93.1
- (no CPE)range: < 115.0-150200.152.93.1
- (no CPE)range: < 115.0-150200.152.93.1
- (no CPE)range: < 115.0-150200.152.93.1
- (no CPE)range: < 115.0-150200.152.93.1
- (no CPE)range: < 115.0-112.165.1
- (no CPE)range: < 115.0-112.165.1
- (no CPE)range: < 115.0-112.165.1
- (no CPE)range: < 115.0-112.165.1
- (no CPE)range: < 115.0-150000.150.91.1
- (no CPE)range: < 115.0-150200.152.93.1
- (no CPE)range: < 115.0-150200.152.93.1
- (no CPE)range: < 115.0-112.165.1
- (no CPE)range: < 115.0-112.165.1
- (no CPE)range: < 115.0-150000.150.91.1
- (no CPE)range: < 115.0-150200.152.93.1
- (no CPE)range: < 115.0-150200.152.93.1
- (no CPE)range: < 115.0-112.165.1
- (no CPE)range: < 115.0-112.165.1
- (no CPE)range: < 115.0-112.165.1
Mozilla Corporation/Firefoxv5
Range: unspecified

Patches

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000