CVE-2023-23604 — Creation of duplicate SystemPrincipal from less secure contexts
A duplicate `SystemPrincipal` object could be created when parsing a non-system html document via `DOMParser::ParseFromSafeString`. This could have lead to bypassing web securit…
Published: 2023-06-02 · CVSS: 6.5 · CVSS 3.1
A duplicate `SystemPrincipal` object could be created when parsing a non-system html document via `DOMParser::ParseFromSafeString`. This could have lead to bypassing web security checks. This vulnerability affects Firefox < 109.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7