CVE-2023-6869 - A `<dialog>` element could have been manipulated to paint content outside of a sandboxed iframe

Back Back to CVE browser

MEDIUM

A `<dialog>` element could have been manipulated to paint content outside of a sandboxed iframe

Published Dec 19, 2023

6.5

MEDIUM

CVSS 3.1

EPSS 0.56%

Description

A `<dialog>` element could have been manipulated to paint content outside of a sandboxed iframe. This could allow untrusted content to display under the guise of trusted content. This vulnerability affects Firefox < 121.

Affected products

Vendor Mozilla Product Firefox Default
unknown
Affected
- ≥ unspecified, < 121

Default status is the baseline for the product. Each version can override it (patched versions can be marked unaffected).

Vendor	Product	Default status	Versions
Mozilla	Firefox	unknown	Affected ≥ unspecified, < 121

Remediation

No remediation recorded yet.

Weaknesses (0)

No CWE recorded.

References (4)

https://bugzilla.mozilla.org/show_bug.cgi?id=1799036
Issue TrackingPermissions Required
https://euvd.enisa.europa.eu/vulnerability/EUVD-2023-59073
Advisory
https://security.gentoo.org/glsa/202401-10
Third Party Advisory
https://www.mozilla.org/security/advisories/mfsa2023-56/
Vendor Advisory

Link	Providers	Tags
https://bugzilla.mozilla.org/show_bug.cgi?id=1799036		Issue TrackingPermissions Required
https://euvd.enisa.europa.eu/vulnerability/EUVD-2023-59073		Advisory
https://security.gentoo.org/glsa/202401-10		Third Party Advisory
https://www.mozilla.org/security/advisories/mfsa2023-56/		Vendor Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mozilla

Published Dec 19, 2023

Updated May 7, 2025

Reserved Dec 15, 2023

Link CVE-2023-6869

CISA Vulnrichment

Updated May 7, 2025

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2023-6869

Red Hat

No data

ENISA EUVD

Assigner mozilla

Published Dec 19, 2023

Updated May 7, 2025

Link EUVD-2023-59073

GitHub

No data