CVE-2023-25741

State: Published
Severity: 6.5 Medium
Published: Jun 2, 2023
Updated: Jan 9, 2025
Reserved: Feb 13, 2023

Description

When dragging and dropping an image cross-origin, the image's size could potentially be leaked. This behavior was shipped in 109 and caused web compatibility problems as well as this security concern, so the behavior was disabled until further review. This vulnerability affects Firefox < 110.

Scores

CVSS	Score	Vector	Source
3.1	6.5 Medium	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N	CISA-ADP

Weaknesses

CWE-203 Observable Discrepancy

Affected Products

Product	Versions
FirefoxMozilla	before 110Affected

References

https://www.mozilla.org/security/advisories/mfsa2023-05/
https://bugzilla.mozilla.org/show_bug.cgi?id=1813376
https://bugzilla.mozilla.org/show_bug.cgi?id=1437126
https://bugzilla.mozilla.org/show_bug.cgi?id=1812611

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.