Insufficient UI Warning of Dangerous Operations in Firefox for iOS - CVE-2023-37455
Published: July 11, 2023
Vulnerability identifier: #VU78058
CSH Severity: Medium
CVSS v4: 5.1 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N]
CVE-ID: CVE-2023-37455
CWE-ID: CWE-357
Exploitation vector: Remote access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a remote attacker to perform spoofing attack.
The vulnerability exists due to the media permission request prompt from the site in the background tab is overlaid on top of the site in the foreground tab. A remote attacker can perform spoofing attack.
Affected software
Firefox for iOS
How to mitigate CVE-2023-37455
Install updates from vendor's website.
Firefox for iOS - update to 115.0