CVE-2023-4047

CVE-2023-4047 describes a high-severity vulnerability in Firefox versions prior to 116, and Firefox ESR versions prior to 102.14 and 115.1. This flaw, stemming from a bug in popup notification delay calculation, could allow an attacker to deceive users into granting unwanted permissions. With a CVSS score of 8.8, it presents a significant risk (FAUCET Risk Score: 70/100) as it can be exploited remotely with low attack complexity, potentially leading to high impact on confidentiality, integrity, and availability. While there is no evidence of active exploitation or publicly available exploit code (Metasploit, Nuclei, ExploitDB), the vulnerability has garnered some community discussion and media coverage, indicating awareness within the cybersecurity landscape.