CVE-2023-4581
XLL file extensions were downloadable without warnings
Excel `.xll` add-in files did not have a blocklist entry in Firefox's executable blocklist which allowed them to be downloaded without any warning of their potential harm. This vulnerability affects Firefox < 117, Firefox ESR < 102.15, Firefox ESR < 115.2, Thunderbird < 102.15, and Thunderbird < 115.2.
Want to know if your infrastructure is exposed to this?
Talk to TrueHacking →References
https://bugzilla.mozilla.org/show_bug.cgi?id=1843758https://www.mozilla.org/security/advisories/mfsa2023-34/https://www.mozilla.org/security/advisories/mfsa2023-35/https://www.mozilla.org/security/advisories/mfsa2023-36/https://www.mozilla.org/security/advisories/mfsa2023-37/https://www.mozilla.org/security/advisories/mfsa2023-38/