VDB

BDU%3A2023-02804

BDU%3A2023-02804 PUBLISHED CVSS 7.5 HIGH

Record from circl · Published May 25, 2023

Fixed versions

Upgrade to a fixed version or later. Language registries are listed first, then Linux distributions, then vendor products.

PackageEcosystemFixed in
Firefox ESRMozilla102.11
ThunderbirdMozilla102.11
FirefoxMozilla113

Risk scores

CVSS 2.0
7.5

Affected products

VendorProductVersions
ООО «РусБИТех-Астра», АО «ИВК», Mozilla Corp., АО "НППКТ"Astra Linux Special Edition (запись в едином реестре российских программ №369), Альт 8 СП (запись в едином реестре российских программ №4305), Firefox ESR, Firefox, ОСОН ОСнова Оnyx (запись в едином реестре российских программ №5913), АЛЬТ СП 10
MozillaFirefox ESRunspecified
MozillaThunderbirdunspecified
MozillaFirefoxunspecified

Timeline

  • May 25, 2023 CVE Published
  • Jun 2, 2023 PoC Published
  • Sep 30, 2024 CVE Updated
  • May 7, 2026 Security Advisory (2 in total, the first dated here)

Query this with the API

The same record, from the CLI:

vulnetix vdb vuln BDU%3A2023-02804
vulnetix vdb fixes BDU%3A2023-02804

Or with curl, using the org id and key from your account page:

curl -s -H "Authorization: ApiKey ${VULNETIX_ORG_ID}:${VULNETIX_API_KEY}" \
  "https://api.vdb.vulnetix.com/v2/vuln/BDU%253A2023-02804/fixes/registry"

The Community plan is free and allows 50 queries a day. Get a free API key · API quickstart

References

Look up in the Resolve Platform →
$ Lookup Community · 50/day Open Lookup ›