Not rated
CVE-2023-37208 When opening Diagcab files, Firefox did not warn the user that these files may contain malicious code
Description
When opening Diagcab files, Firefox did not warn the user that these files may contain malicious code. This vulnerability affects Firefox < 115, Firefox ESR < 102.13, and Thunderbird < 102.13.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Firefox 115 | earliest → < 115 | 115 |
| Firefox ESR 102.13 | earliest → < 102.13 | 102.13 |
| Thunderbird 102.13 | earliest → < 102.13 | 102.13 |