{"affected":[{"affectedData":[{"product":"Firefox","vendor":"Mozilla","versions":[{"lessThan":"116","status":"affected","version":"unspecified","versionType":"custom"}]},{"product":"Firefox ESR","vendor":"Mozilla","versions":[{"lessThan":"115.2","status":"affected","version":"unspecified","versionType":"custom"}]},{"product":"Thunderbird","vendor":"Mozilla","versions":[{"lessThan":"115.2","status":"affected","version":"unspecified","versionType":"custom"}]}],"source":"security@mozilla.org"}],"configurations":[{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*","matchCriteriaId":"C6C6420C-0883-4585-A655-4C470029CB85","versionEndExcluding":"116.0","vulnerable":true}],"negate":false,"operator":"OR"}]}],"cveTags":[],"descriptions":[{"lang":"en","value":"A website could have obscured the full screen notification by using a URL with a scheme handled by an external program, such as a mailto URL. This could have led to user confusion and possible spoofing attacks. This vulnerability affects Firefox < 116, Firefox ESR < 115.2, and Thunderbird < 115.2."},{"lang":"es","value":"Un sitio web podría haber oscurecido la notificación en pantalla completa utilizando una URL con un esquema manejado por un programa externo, como una URL de correo. Esto podría haber generado confusión en los usuarios y posibles ataques de suplantación de identidad. Esta vulnerabilidad afecta a Firefox &lt; 116, Firefox ESR &lt; 115.2 y Thunderbird &lt; 115.2.\n"}],"id":"CVE-2023-4053","lastModified":"2026-06-17T06:36:59.850","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":6.5,"baseSeverity":"MEDIUM","confidentialityImpact":"NONE","integrityImpact":"HIGH","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"REQUIRED","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N","version":"3.1"},"exploitabilityScore":2.8,"impactScore":3.6,"source":"nvd@nist.gov","type":"Primary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2023-4053","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","timestamp":"2024-10-22T14:37:53.127901Z","version":"2.0.3"}}]},"published":"2023-08-01T15:15:10.267","references":[{"source":"security@mozilla.org","tags":["Issue Tracking","Permissions Required"],"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=1839079"},{"source":"security@mozilla.org","tags":["Vendor Advisory"],"url":"https://www.mozilla.org/security/advisories/mfsa2023-29/"},{"source":"security@mozilla.org","url":"https://www.mozilla.org/security/advisories/mfsa2023-36/"},{"source":"security@mozilla.org","url":"https://www.mozilla.org/security/advisories/mfsa2023-38/"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Permissions Required"],"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=1839079"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"url":"https://www.mozilla.org/security/advisories/mfsa2023-29/"},{"source":"af854a3a-2127-422b-91ae-364da2661108","url":"https://www.mozilla.org/security/advisories/mfsa2023-36/"},{"source":"af854a3a-2127-422b-91ae-364da2661108","url":"https://www.mozilla.org/security/advisories/mfsa2023-38/"}],"sourceIdentifier":"security@mozilla.org","vulnStatus":"Modified","weaknesses":[{"description":[{"lang":"en","value":"CWE-59"}],"source":"nvd@nist.gov","type":"Primary"}]}