CVE-2023-28161

If temporary one-time permissions, such as the ability to use the Camera, were granted to a document loaded using a file: URL, that permission persisted in that tab for all other documents loaded from a file: URL. This is potentially dangerous if the local files came from different sources, such as in a download directory. This vulnerability affects Firefox < 111.

Weakness

The product does not preserve permissions or incorrectly preserves permissions when copying, restoring, or sharing objects, which can cause them to have less restrictive permissions than intended.

Affected Software

References

• https://bugzilla.mozilla.org/show_bug.cgi?id=1811181
• https://www.mozilla.org/security/advisories/mfsa2023-09/
• https://bugzilla.mozilla.org/show_bug.cgi?id=1811181
• https://www.mozilla.org/security/advisories/mfsa2023-09/
• https://bugzilla.mozilla.org/show_bug.cgi?id=1811181