Dashboard / CVE-2023-28163

CVE-2023-28163

MEDIUM
MEDIUM Priority: 0.05 BB Relevance: 63/100
Published: 2023-06-02 Modified: 2026-10-23 First seen: 2026-10-29 Status: active

Attack Surface

Network Low Complexity No Auth Integ. Impact

CVSS Vector Breakdown

AV: Network
AC: Low
PR: None
UI: Required
S: Unchanged
C: None
I: High
A: None

Description

When downloading files through the Save As dialog on Windows with suggested filenames containing environment variable names, Windows would have resolved those in the context of the current user. <br>*This bug only affects Firefox on Windows. Other versions of Firefox are unaffected.*. This vulnerability affects Firefox < 111, Firefox ESR < 102.9, and Thunderbird < 102.9.

Weakness Classification (1)

Affected Software (3)

VendorProductVersion
mozilla firefox < 111.0
mozilla firefox_esr < 102.9
mozilla thunderbird < 102.9

References & Advisories (4)

https://bugzilla.mozilla.org/show_bug.cgi?id=1817768
Issue Tracking Permissions Required Vendor Advisory

Bug Bounty Relevance

63 / 100
✓ Network accessible
✓ No authentication
✓ Low complexity

CVSS Score

6.5 / 10.0 v3.1
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

EPSS — Exploitation Probability

0.80%
Raw Score 0.007980
Percentile 56.4%
Date 2026-10-29

EPSS Trend

2026-10-29
0.00798
2026-10-28
0.00798

Intelligence Sources

nvd ref →

External Links