CVE-2023-37202

{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"cveId": "CVE-2023-37202", "assignerOrgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe", "state": "PUBLISHED", "assignerShortName": "mozilla", "dateReserved": "2023-06-28T18:07:02.265Z", "datePublished": "2023-07-05T08:52:01.098Z", "dateUpdated": "2025-02-13T16:56:32.298Z"}, "containers": {"cna": {"affected": [{"product": "Firefox", "vendor": "Mozilla", "versions": [{"lessThan": "115", "status": "affected", "version": "unspecified", "versionType": "custom"}]}, {"product": "Firefox ESR", "vendor": "Mozilla", "versions": [{"lessThan": "102.13", "status": "affected", "version": "unspecified", "versionType": "custom"}]}, {"product": "Thunderbird", "vendor": "Mozilla", "versions": [{"lessThan": "102.13", "status": "affected", "version": "unspecified", "versionType": "custom"}]}], "descriptions": [{"lang": "en", "value": "Cross-compartment wrappers wrapping a scripted proxy could have caused objects from other compartments to be stored in the main compartment resulting in a use-after-free. This vulnerability affects Firefox < 115, Firefox ESR < 102.13, and Thunderbird < 102.13.", "supportingMedia": [{"type": "text/html", "base64": false, "value": "Cross-compartment wrappers wrapping a scripted proxy could have caused objects from other compartments to be stored in the main compartment resulting in a use-after-free. This vulnerability affects Firefox < 115, Firefox ESR < 102.13, and Thunderbird < 102.13."}]}], "problemTypes": [{"descriptions": [{"description": "Potential use-after-free from compartment mismatch in SpiderMonkey", "lang": "en", "type": "text"}]}], "references": [{"url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1834711"}, {"url": "https://www.mozilla.org/security/advisories/mfsa2023-22/"}, {"url": "https://www.mozilla.org/security/advisories/mfsa2023-23/"}, {"url": "https://www.mozilla.org/security/advisories/mfsa2023-24/"}, {"url": "https://lists.debian.org/debian-lts-announce/2023/07/msg00006.html"}, {"url": "https://www.debian.org/security/2023/dsa-5450"}, {"url": "https://www.debian.org/security/2023/dsa-5451"}, {"url": "https://lists.debian.org/debian-lts-announce/2023/07/msg00015.html"}], "credits": [{"lang": "en", "value": "zx"}], "providerMetadata": {"orgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe", "shortName": "mozilla", "dateUpdated": "2023-07-12T09:06:23.682Z"}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-02T17:09:32.923Z"}, "title": "CVE Program Container", "references": [{"url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1834711", "tags": ["x_transferred"]}, {"url": "https://www.mozilla.org/security/advisories/mfsa2023-22/", "tags": ["x_transferred"]}, {"url": "https://www.mozilla.org/security/advisories/mfsa2023-23/", "tags": ["x_transferred"]}, {"url": "https://www.mozilla.org/security/advisories/mfsa2023-24/", "tags": ["x_transferred"]}, {"url": "https://lists.debian.org/debian-lts-announce/2023/07/msg00006.html", "tags": ["x_transferred"]}, {"url": "https://www.debian.org/security/2023/dsa-5450", "tags": ["x_transferred"]}, {"url": "https://www.debian.org/security/2023/dsa-5451", "tags": ["x_transferred"]}, {"url": "https://lists.debian.org/debian-lts-announce/2023/07/msg00015.html", "tags": ["x_transferred"]}]}, {"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2024-11-21T14:17:49.931655Z", "id": "CVE-2023-37202", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-11-21T14:17:58.832Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CVE Program Container", "references": [{"url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1834711", "tags": ["x_transferred"]}, {"url": "https://www.mozilla.org/security/advisories/mfsa2023-22/", "tags": ["x_transferred"]}, {"url": "https://www.mozilla.org/security/advisories/mfsa2023-23/", "tags": ["x_transferred"]}, {"url": "https://www.mozilla.org/security/advisories/mfsa2023-24/", "tags": ["x_transferred"]}, {"url": "https://lists.debian.org/debian-lts-announce/2023/07/msg00006.html", "tags": ["x_transferred"]}, {"url": "https://www.debian.org/security/2023/dsa-5450", "tags": ["x_transferred"]}, {"url": "https://www.debian.org/security/2023/dsa-5451", "tags": ["x_transferred"]}, {"url": "https://lists.debian.org/debian-lts-announce/2023/07/msg00015.html", "tags": ["x_transferred"]}], "providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-02T17:09:32.923Z"}}, {"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2023-37202", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2024-11-21T14:17:49.931655Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-11-21T14:17:55.130Z"}}], "cna": {"credits": [{"lang": "en", "value": "zx"}], "affected": [{"vendor": "Mozilla", "product": "Firefox", "versions": [{"status": "affected", "version": "unspecified", "lessThan": "115", "versionType": "custom"}]}, {"vendor": "Mozilla", "product": "Firefox ESR", "versions": [{"status": "affected", "version": "unspecified", "lessThan": "102.13", "versionType": "custom"}]}, {"vendor": "Mozilla", "product": "Thunderbird", "versions": [{"status": "affected", "version": "unspecified", "lessThan": "102.13", "versionType": "custom"}]}], "references": [{"url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1834711"}, {"url": "https://www.mozilla.org/security/advisories/mfsa2023-22/"}, {"url": "https://www.mozilla.org/security/advisories/mfsa2023-23/"}, {"url": "https://www.mozilla.org/security/advisories/mfsa2023-24/"}, {"url": "https://lists.debian.org/debian-lts-announce/2023/07/msg00006.html"}, {"url": "https://www.debian.org/security/2023/dsa-5450"}, {"url": "https://www.debian.org/security/2023/dsa-5451"}, {"url": "https://lists.debian.org/debian-lts-announce/2023/07/msg00015.html"}], "descriptions": [{"lang": "en", "value": "Cross-compartment wrappers wrapping a scripted proxy could have caused objects from other compartments to be stored in the main compartment resulting in a use-after-free. This vulnerability affects Firefox < 115, Firefox ESR < 102.13, and Thunderbird < 102.13.", "supportingMedia": [{"type": "text/html", "value": "Cross-compartment wrappers wrapping a scripted proxy could have caused objects from other compartments to be stored in the main compartment resulting in a use-after-free. This vulnerability affects Firefox < 115, Firefox ESR < 102.13, and Thunderbird < 102.13.", "base64": false}]}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "text", "description": "Potential use-after-free from compartment mismatch in SpiderMonkey"}]}], "providerMetadata": {"orgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe", "shortName": "mozilla", "dateUpdated": "2023-07-05T08:52:01.098Z"}}}, "cveMetadata": {"cveId": "CVE-2023-37202", "state": "PUBLISHED", "dateUpdated": "2024-11-21T14:17:58.832Z", "dateReserved": "2023-06-28T18:07:02.265Z", "assignerOrgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe", "datePublished": "2023-07-05T08:52:01.098Z", "assignerShortName": "mozilla"}, "dataVersion": "5.1"}

{"affected": [{"affectedData": [{"product": "Firefox", "vendor": "Mozilla", "versions": [{"lessThan": "115", "status": "affected", "version": "unspecified", "versionType": "custom"}]}, {"product": "Firefox ESR", "vendor": "Mozilla", "versions": [{"lessThan": "102.13", "status": "affected", "version": "unspecified", "versionType": "custom"}]}, {"product": "Thunderbird", "vendor": "Mozilla", "versions": [{"lessThan": "102.13", "status": "affected", "version": "unspecified", "versionType": "custom"}]}], "source": "security@mozilla.org"}], "configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*", "matchCriteriaId": "D1EEB7A5-332B-475E-8BEC-52B282166DDA", "versionEndExcluding": "115.0", "vulnerable": true}, {"criteria": "cpe:2.3:a:mozilla:firefox_esr:*:*:*:*:*:*:*:*", "matchCriteriaId": "D7E02D3B-8A45-46DD-A53D-C374264A31F5", "versionEndExcluding": "102.13", "vulnerable": true}, {"criteria": "cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*", "matchCriteriaId": "10BCAF6D-BACC-4240-A6EA-FBC769D9F5BF", "versionEndExcluding": "102.13", "vulnerable": true}], "negate": false, "operator": "OR"}]}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*", "matchCriteriaId": "07B237A9-69A3-4A9C-9DA0-4E06BD37AE73", "vulnerable": true}, {"criteria": "cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:*", "matchCriteriaId": "FA6FEEC2-9F11-4643-8827-749718254FED", "vulnerable": true}, {"criteria": "cpe:2.3:o:debian:debian_linux:12.0:*:*:*:*:*:*:*", "matchCriteriaId": "46D69DCC-AE4D-4EA5-861C-D60951444C6C", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "Cross-compartment wrappers wrapping a scripted proxy could have caused objects from other compartments to be stored in the main compartment resulting in a use-after-free. This vulnerability affects Firefox < 115, Firefox ESR < 102.13, and Thunderbird < 102.13."}, {"lang": "es", "value": "Envoltorios entre compartimentos que envuelven un proxy con script podr\u00edan haber causado que objetos de otros compartimentos se almacenaran en el compartimento principal, lo que resultar\u00eda en un uso despu\u00e9s de liberaci\u00f3n. Esta vulnerabilidad afecta a Firefox menor que 115, Firefox ESR anterior a 102.13 y Thunderbird anterior a 102.13."}], "id": "CVE-2023-37202", "lastModified": "2026-10-24T13:10:00.147", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 8.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 2.8, "impactScore": 5.9, "source": "nvd@nist.gov", "type": "Primary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2023-37202", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "total"}], "role": "CISA Coordinator", "timestamp": "2024-11-21T14:17:49.931655Z", "version": "2.0.3"}}]}, "published": "2023-07-05T09:15:09.897", "references": [{"source": "security@mozilla.org", "tags": ["Issue Tracking", "Permissions Required"], "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1834711"}, {"source": "security@mozilla.org", "tags": ["Mailing List", "Third Party Advisory"], "url": "https://lists.debian.org/debian-lts-announce/2023/07/msg00006.html"}, {"source": "security@mozilla.org", "url": "https://lists.debian.org/debian-lts-announce/2023/07/msg00015.html"}, {"source": "security@mozilla.org", "tags": ["Third Party Advisory"], "url": "https://www.debian.org/security/2023/dsa-5450"}, {"source": "security@mozilla.org", "tags": ["Third Party Advisory"], "url": "https://www.debian.org/security/2023/dsa-5451"}, {"source": "security@mozilla.org", "tags": ["Vendor Advisory"], "url": "https://www.mozilla.org/security/advisories/mfsa2023-22/"}, {"source": "security@mozilla.org", "tags": ["Vendor Advisory"], "url": "https://www.mozilla.org/security/advisories/mfsa2023-23/"}, {"source": "security@mozilla.org", "tags": ["Vendor Advisory"], "url": "https://www.mozilla.org/security/advisories/mfsa2023-24/"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Issue Tracking", "Permissions Required"], "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1834711"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Mailing List", "Third Party Advisory"], "url": "https://lists.debian.org/debian-lts-announce/2023/07/msg00006.html"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://lists.debian.org/debian-lts-announce/2023/07/msg00015.html"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Third Party Advisory"], "url": "https://www.debian.org/security/2023/dsa-5450"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Third Party Advisory"], "url": "https://www.debian.org/security/2023/dsa-5451"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Vendor Advisory"], "url": "https://www.mozilla.org/security/advisories/mfsa2023-22/"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Vendor Advisory"], "url": "https://www.mozilla.org/security/advisories/mfsa2023-23/"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Vendor Advisory"], "url": "https://www.mozilla.org/security/advisories/mfsa2023-24/"}], "sourceIdentifier": "security@mozilla.org", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-416"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{"acknowledgement": "Red Hat would like to thank the Mozilla project for reporting this issue. Upstream acknowledges zx as the original reporter.", "affected_release": [{"advisory": "RHSA-2023:4062", "cpe": "cpe:/o:redhat:enterprise_linux:7", "package": "thunderbird-0:102.13.0-2.el7_9", "product_name": "Red Hat Enterprise Linux 7", "release_date": "2023-07-13T00:00:00Z"}, {"advisory": "RHSA-2023:4079", "cpe": "cpe:/o:redhat:enterprise_linux:7", "package": "firefox-0:102.13.0-2.el7_9", "product_name": "Red Hat Enterprise Linux 7", "release_date": "2023-07-13T00:00:00Z"}, {"advisory": "RHSA-2023:4063", "cpe": "cpe:/a:redhat:enterprise_linux:8", "package": "thunderbird-0:102.13.0-2.el8_8", "product_name": "Red Hat Enterprise Linux 8", "release_date": "2023-07-13T00:00:00Z"}, {"advisory": "RHSA-2023:4076", "cpe": "cpe:/a:redhat:enterprise_linux:8", "package": "firefox-0:102.13.0-2.el8_8", "product_name": "Red Hat Enterprise Linux 8", "release_date": "2023-07-13T00:00:00Z"}, {"advisory": "RHSA-2023:4065", "cpe": "cpe:/a:redhat:rhel_e4s:8.1", "package": "thunderbird-0:102.13.0-2.el8_1", "product_name": "Red Hat Enterprise Linux 8.1 Update Services for SAP Solutions", "release_date": "2023-07-13T00:00:00Z"}, {"advisory": "RHSA-2023:4072", "cpe": "cpe:/a:redhat:rhel_e4s:8.1", "package": "firefox-0:102.13.0-2.el8_1", "product_name": "Red Hat Enterprise Linux 8.1 Update Services for SAP Solutions", "release_date": "2023-07-13T00:00:00Z"}, {"advisory": "RHSA-2023:4068", "cpe": "cpe:/a:redhat:rhel_aus:8.2", "package": "thunderbird-0:102.13.0-2.el8_2", "product_name": "Red Hat Enterprise Linux 8.2 Advanced Update Support", "release_date": "2023-07-13T00:00:00Z"}, {"advisory": "RHSA-2023:4070", "cpe": "cpe:/a:redhat:rhel_aus:8.2", "package": "firefox-0:102.13.0-2.el8_2", "product_name": "Red Hat Enterprise Linux 8.2 Advanced Update Support", "release_date": "2023-07-13T00:00:00Z"}, {"advisory": "RHSA-2023:4068", "cpe": "cpe:/a:redhat:rhel_tus:8.2", "package": "thunderbird-0:102.13.0-2.el8_2", "product_name": "Red Hat Enterprise Linux 8.2 Telecommunications Update Service", "release_date": "2023-07-13T00:00:00Z"}, {"advisory": "RHSA-2023:4070", "cpe": "cpe:/a:redhat:rhel_tus:8.2", "package": "firefox-0:102.13.0-2.el8_2", "product_name": "Red Hat Enterprise Linux 8.2 Telecommunications Update Service", "release_date": "2023-07-13T00:00:00Z"}, {"advisory": "RHSA-2023:4068", "cpe": "cpe:/a:redhat:rhel_e4s:8.2", "package": "thunderbird-0:102.13.0-2.el8_2", "product_name": "Red Hat Enterprise Linux 8.2 Update Services for SAP Solutions", "release_date": "2023-07-13T00:00:00Z"}, {"advisory": "RHSA-2023:4070", "cpe": "cpe:/a:redhat:rhel_e4s:8.2", "package": "firefox-0:102.13.0-2.el8_2", "product_name": "Red Hat Enterprise Linux 8.2 Update Services for SAP Solutions", "release_date": "2023-07-13T00:00:00Z"}, {"advisory": "RHSA-2023:4074", "cpe": "cpe:/a:redhat:rhel_aus:8.4", "package": "thunderbird-0:102.13.0-2.el8_4", "product_name": "Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support", "release_date": "2023-07-13T00:00:00Z"}, {"advisory": "RHSA-2023:4075", "cpe": "cpe:/a:redhat:rhel_aus:8.4", "package": "firefox-0:102.13.0-2.el8_4", "product_name": "Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support", "release_date": "2023-07-13T00:00:00Z"}, {"advisory": "RHSA-2023:4074", "cpe": "cpe:/a:redhat:rhel_tus:8.4", "package": "thunderbird-0:102.13.0-2.el8_4", "product_name": "Red Hat Enterprise Linux 8.4 Telecommunications Update Service", "release_date": "2023-07-13T00:00:00Z"}, {"advisory": "RHSA-2023:4075", "cpe": "cpe:/a:redhat:rhel_tus:8.4", "package": "firefox-0:102.13.0-2.el8_4", "product_name": "Red Hat Enterprise Linux 8.4 Telecommunications Update Service", "release_date": "2023-07-13T00:00:00Z"}, {"advisory": "RHSA-2023:4074", "cpe": "cpe:/a:redhat:rhel_e4s:8.4", "package": "thunderbird-0:102.13.0-2.el8_4", "product_name": "Red Hat Enterprise Linux 8.4 Update Services for SAP Solutions", "release_date": "2023-07-13T00:00:00Z"}, {"advisory": "RHSA-2023:4075", "cpe": "cpe:/a:redhat:rhel_e4s:8.4", "package": "firefox-0:102.13.0-2.el8_4", "product_name": "Red Hat Enterprise Linux 8.4 Update Services for SAP Solutions", "release_date": "2023-07-13T00:00:00Z"}, {"advisory": "RHSA-2023:4067", "cpe": "cpe:/a:redhat:rhel_eus:8.6", "package": "thunderbird-0:102.13.0-2.el8_6", "product_name": "Red Hat Enterprise Linux 8.6 Extended Update Support", "release_date": "2023-07-13T00:00:00Z"}, {"advisory": "RHSA-2023:4069", "cpe": "cpe:/a:redhat:rhel_eus:8.6", "package": "firefox-0:102.13.0-2.el8_6", "product_name": "Red Hat Enterprise Linux 8.6 Extended Update Support", "release_date": "2023-07-13T00:00:00Z"}, {"advisory": "RHSA-2023:4064", "cpe": "cpe:/a:redhat:enterprise_linux:9", "package": "thunderbird-0:102.13.0-2.el9_2", "product_name": "Red Hat Enterprise Linux 9", "release_date": "2023-07-13T00:00:00Z"}, {"advisory": "RHSA-2023:4071", "cpe": "cpe:/a:redhat:enterprise_linux:9", "package": "firefox-0:102.13.0-2.el9_2", "product_name": "Red Hat Enterprise Linux 9", "release_date": "2023-07-13T00:00:00Z"}, {"advisory": "RHSA-2023:4066", "cpe": "cpe:/a:redhat:rhel_eus:9.0", "package": "thunderbird-0:102.13.0-2.el9_0", "product_name": "Red Hat Enterprise Linux 9.0 Extended Update Support", "release_date": "2023-07-13T00:00:00Z"}, {"advisory": "RHSA-2023:4073", "cpe": "cpe:/a:redhat:rhel_eus:9.0", "package": "firefox-0:102.13.0-2.el9_0", "product_name": "Red Hat Enterprise Linux 9.0 Extended Update Support", "release_date": "2023-07-13T00:00:00Z"}], "bugzilla": {"description": "Mozilla: Potential use-after-free from compartment mismatch in SpiderMonkey", "id": "2219748", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2219748"}, "csaw": false, "cvss3": {"cvss3_base_score": "8.8", "cvss3_scoring_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "status": "verified"}, "cwe": "CWE-416", "details": ["Cross-compartment wrappers wrapping a scripted proxy could have caused objects from other compartments to be stored in the main compartment resulting in a use-after-free. This vulnerability affects Firefox < 115, Firefox ESR < 102.13, and Thunderbird < 102.13.", "The Mozilla Foundation Security Advisory describes this flaw as:\nCross-compartment wrappers wrapping a scripted proxy could have caused objects from other compartments to be stored in the main compartment resulting in a use-after-free."], "name": "CVE-2023-37202", "package_state": [{"cpe": "cpe:/o:redhat:enterprise_linux:6", "fix_state": "Out of support scope", "package_name": "firefox", "product_name": "Red Hat Enterprise Linux 6"}, {"cpe": "cpe:/o:redhat:enterprise_linux:6", "fix_state": "Out of support scope", "package_name": "thunderbird", "product_name": "Red Hat Enterprise Linux 6"}], "public_date": "2023-07-04T00:00:00Z", "references": ["https://www.cve.org/CVERecord?id=CVE-2023-37202\nhttps://nvd.nist.gov/vuln/detail/CVE-2023-37202\nhttps://www.mozilla.org/en-US/security/advisories/mfsa2023-23/#CVE-2023-37202"], "statement": "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", "threat_severity": "Important"}

{}