CVE-2023-4053

A website could have obscured the full screen notification by using a URL with a scheme handled by an external program, such as a mailto URL. This could have led to user confusion and possible spoofing attacks. This vulnerability affects Firefox < 116, Firefox ESR < 115.2, and Thunderbird < 115.2.

• CWE-59

• https://bugzilla.mozilla.org/show_bug.cgi?id=1839079Issue Tracking, Permissions Required
• https://www.mozilla.org/security/advisories/mfsa2023-29/Vendor Advisory
• https://www.mozilla.org/security/advisories/mfsa2023-36/
• https://www.mozilla.org/security/advisories/mfsa2023-38/
• https://bugzilla.mozilla.org/show_bug.cgi?id=1839079Issue Tracking, Permissions Required
• https://www.mozilla.org/security/advisories/mfsa2023-29/Vendor Advisory
• https://www.mozilla.org/security/advisories/mfsa2023-36/
• https://www.mozilla.org/security/advisories/mfsa2023-38/

Published

Aug 1, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-40518LiteSpeed OpenLiteSpeed before 1.7.18 does not strictly vali…7.5
• CVE-2023-40519A cross-site scripting (XSS) vulnerability in the bpk-common…6.1
• CVE-2023-4052The Firefox updater created a directory writable by non-priv…6.5
• CVE-2023-40520The issue was addressed with improved checks. This issue is …3.3
• CVE-2023-40528This issue was addressed by removing the vulnerable code. Th…5.5
• CVE-2023-40529This issue was addressed with improved redaction of sensitiv…2.4
• CVE-2023-40530Improper authorization in handler for custom URL scheme issu…4.7
• CVE-2023-40531Archer AX6000 firmware versions prior to 'Archer AX6000(JP)_…8
• CVE-2023-40532Path traversal vulnerability in Welcart e-Commerce versions …4.3
• CVE-2023-40533Rejected reason: This CVE ID is a duplicate of CVE-2022-4046…
• CVE-2023-40534When a client-side HTTP/2 profile and the HTTP MRF Router op…7.5
• CVE-2023-40535Stored cross-site scripting vulnerability in View setting pa…5.4