CVE-2023-4045

CVE-2023-4045 describes an Offscreen Canvas vulnerability in Firefox versions prior to 116, and Firefox ESR versions prior to 102.14 and 115.1. This flaw allowed for cross-origin tainting, potentially enabling unauthorized access to image data from other websites, violating the same-origin policy. Rated as Medium severity (CVSS 5.3), it is a network-based attack with low complexity, requiring no user interaction or privileges, and primarily impacting confidentiality. Currently, there is no evidence of active exploitation, nor are public exploit codes like Metasploit or ExploitDB available, though it has garnered some community discussion and media coverage.