Mozilla Vulnerabilities and Affected Products
Vulnerabilities associated with common-voice.
Products
Clear product- Firefox1,739 vulnerabilities
- Thunderbird1,209 vulnerabilities
- Firefox ESR712 vulnerabilities
- firefox_esr69 vulnerabilities
- Firefox for iOS54 vulnerabilities
- Firefox for Android33 vulnerabilities
- Focus for Android17 vulnerabilities
- Focus for iOS13 vulnerabilities
- Thunderbird ESR13 vulnerabilities
- Firefox and Thunderbird7 vulnerabilities
- NSS6 vulnerabilities
- Focus3 vulnerabilities
- Hubs Cloud2 vulnerabilities
- Mozilla Bleach2 vulnerabilities
- Mozilla VPN2 vulnerabilities
- WebThings Gateway2 vulnerabilities
- Bugzilla1 vulnerability
- common-voice1 vulnerability
- Convict1 vulnerability
- Firefox for1 vulnerability
- Firefox, Firefox ESR, and Thunderbird1 vulnerability
- firefox_for_ios1 vulnerability
- focus_for_ios1 vulnerability
- geckodriver1 vulnerability
- hawk1 vulnerability
| Vulnerability | Title and context | CVSS | EPSS | PoCs | Signals | STIX action |
|---|---|---|---|---|---|---|
CVE-2023-42808MEDIUM | Common Voice Cross-site Scripting vulnerabilityCommon Voice is the web app for Mozilla Common Voice, a platform for collecting speech donations in order to create public domain datasets for training voice recognition-related tools. Version 1.88.2 is vulnerable to reflected Cross-Site Scripting given that user-controlled data flows to a path expression (path of a network request). This issue may lead to reflected Cross-Site Scripting (XSS) in the context of Common Voice’s server origin. As of time of publication, it is unknown whether any pat… CWE-79Oct 4, 2023 | CVSS6.1v3.1 | EPSS0.454% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |