CVE-2023-4583

When checking if the Browsing Context had been discarded in `HttpBaseChannel`, if the load group was not available then it was assumed to have already been discarded which was not always the case for private channels after the private session had ended. This vulnerability affects Firefox < 117, Firefox ESR < 115.2, and Thunderbird < 115.2.

• CWE-754

• https://bugzilla.mozilla.org/show_bug.cgi?id=1842030Issue Tracking
• https://www.mozilla.org/security/advisories/mfsa2023-34/Vendor Advisory
• https://www.mozilla.org/security/advisories/mfsa2023-36/Vendor Advisory
• https://www.mozilla.org/security/advisories/mfsa2023-38/Vendor Advisory
• https://bugzilla.mozilla.org/show_bug.cgi?id=1842030Issue Tracking
• https://www.mozilla.org/security/advisories/mfsa2023-34/Vendor Advisory
• https://www.mozilla.org/security/advisories/mfsa2023-36/Vendor Advisory
• https://www.mozilla.org/security/advisories/mfsa2023-38/Vendor Advisory

Published

Sep 11, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-45824OroPlatform is a PHP Business Application Platform (BAP). A…4.3
• CVE-2023-45825ydb-go-sdk is a pure Go native and database/sql driver for t…5.5
• CVE-2023-45826Leantime is an open source project management system. A 'use…6.5
• CVE-2023-45827Dot diver is a lightweight, powerful, and dependency-free Ty…9.8
• CVE-2023-45828Missing Authorization vulnerability in RumbleTalk RumbleTalk…5.4
• CVE-2023-45829Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulne…5.4
• CVE-2023-45830Improper Neutralization of Special Elements used in an SQL C…9.8
• CVE-2023-45831Cross-Site Request Forgery (CSRF) vulnerability in Pixelativ…8.8
• CVE-2023-45832Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerabili…4.8
• CVE-2023-45833Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerabili…4.8
• CVE-2023-45834Exposure of Sensitive Information to an Unauthorized Actor v…5.3
• CVE-2023-45835Unauth. Reflected Cross-Site Scripting (XSS) vulnerability i…6.1