CVE-2023-25743

A lack of in app notification for entering fullscreen mode could have lead to a malicious website spoofing browser chrome.<br>*This bug only affects Firefox Focus. Other versions of Firefox are unaffected.*. This vulnerability affects Firefox < 110 and Firefox ESR < 102.8.

• CWE-290

• https://bugzilla.mozilla.org/show_bug.cgi?id=1800203Issue Tracking, Permissions Required
• https://www.mozilla.org/security/advisories/mfsa2023-05/Vendor Advisory
• https://www.mozilla.org/security/advisories/mfsa2023-06/Vendor Advisory
• https://bugzilla.mozilla.org/show_bug.cgi?id=1800203Issue Tracking, Permissions Required
• https://www.mozilla.org/security/advisories/mfsa2023-05/Vendor Advisory
• https://www.mozilla.org/security/advisories/mfsa2023-06/Vendor Advisory

Published

Jun 2, 2023

Last Modified

Jun 17, 2026

Status

Modified

• Same Subject, Wrong User: A Cross-Issuer Account Takeover in n8nStrix found an identity-binding bug in n8n's token-exchange flow enabling account takeover.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-25738Members of the <code>DEVMODEW</code> struct set by the print…6.5
• CVE-2023-25739Module load requests that failed were not being checked as t…8.8
• CVE-2023-2574Advantech EKI-1524, EKI-1522, EKI-1521 devices through 1.21 …8.8
• CVE-2023-25740After downloading a Windows <code>.scf</code> script from th…8.8
• CVE-2023-25741When dragging and dropping an image cross-origin, the image'…6.5
• CVE-2023-25742When importing a SPKI RSA public key as ECDSA P-256, the key…6.5
• CVE-2023-25744Mmemory safety bugs present in Firefox 109 and Firefox ESR 1…8.8
• CVE-2023-25745Memory safety bugs present in Firefox 109. Some of these bug…8.8
• CVE-2023-25746Memory safety bugs present in Firefox ESR 102.7. Some of the…8.8
• CVE-2023-25747A potential use-after-free in libaudio was fixed by disablin…7.5
• CVE-2023-25748By displaying a prompt with a long description, the fullscre…4.3
• CVE-2023-25749Android applications with unpatched vulnerabilities can be l…4.3