{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Moderate"
    },
    "category": "csaf_vex",
    "csaf_version": "2.0",
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "title": "Opening local .scf files could cause unexpected network loads",
    "tracking": {
      "current_release_date": "2026-08-11T17:01:04+00:00",
      "generator": {
        "date": "2026-08-11T17:01:04+00:00",
        "engine": {
          "name": "CSAF Generator",
          "version": "3.3.0"
        }
      },
      "id": "CVE-2023-25740",
      "initial_release_date": "2023-02-14T00:00:00+00:00",
      "revision_history": [
        {
          "date": "2026-08-11T17:01:04+00:00",
          "number": "1",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "1"
    }
  },
  "product_tree": {
    "branches": [
      {
        "category": "vendor",
        "name": "Red Hat",
        "branches": [
          {
            "category": "product_name",
            "name": "Red Hat Enterprise Linux 6-els",
            "product": {
              "name": "Red Hat Enterprise Linux 6-els",
              "product_id": "rhel-6-els.els",
              "product_identification_helper": {
                "cpe": "cpe:/o:redhat:rhel_els:6"
              }
            }
          },
          {
            "category": "product_name",
            "name": "Red Hat Enterprise Linux 7-els",
            "product": {
              "name": "Red Hat Enterprise Linux 7-els",
              "product_id": "rhel-7-els.els",
              "product_identification_helper": {
                "cpe": "cpe:/o:redhat:rhel_els:7"
              }
            }
          },
          {
            "category": "product_name",
            "name": "Red Hat Enterprise Linux 8.10.z",
            "product": {
              "name": "Red Hat Enterprise Linux 8.10.z",
              "product_id": "rhel-8.10.z",
              "product_identification_helper": {
                "cpe": "cpe:/a:redhat:enterprise_linux:8"
              }
            }
          },
          {
            "category": "product_name",
            "name": "Red Hat Enterprise Linux 8.2.0.z",
            "product": {
              "name": "Red Hat Enterprise Linux 8.2.0.z",
              "product_id": "rhel-8.2.0.z.aus",
              "product_identification_helper": {
                "cpe": "cpe:/a:redhat:rhel_aus:8.2"
              }
            }
          },
          {
            "category": "product_name",
            "name": "Red Hat Enterprise Linux 8.4.0.z",
            "product": {
              "name": "Red Hat Enterprise Linux 8.4.0.z",
              "product_id": "rhel-8.4.0.z.eus",
              "product_identification_helper": {
                "cpe": "cpe:/a:redhat:rhel_eus:8.4"
              }
            }
          },
          {
            "category": "product_name",
            "name": "Red Hat Enterprise Linux 8.6.0.z",
            "product": {
              "name": "Red Hat Enterprise Linux 8.6.0.z",
              "product_id": "rhel-8.6.0.z.aus",
              "product_identification_helper": {
                "cpe": "cpe:/a:redhat:rhel_aus:8.6"
              }
            }
          },
          {
            "category": "product_name",
            "name": "Red Hat Enterprise Linux 8.8.0.z",
            "product": {
              "name": "Red Hat Enterprise Linux 8.8.0.z",
              "product_id": "rhel-8.8.0.z.eus",
              "product_identification_helper": {
                "cpe": "cpe:/a:redhat:rhel_eus:8.8"
              }
            }
          },
          {
            "category": "product_name",
            "name": "Red Hat Enterprise Linux 9.0.0.z",
            "product": {
              "name": "Red Hat Enterprise Linux 9.0.0.z",
              "product_id": "rhel-9.0.0.z.eus",
              "product_identification_helper": {
                "cpe": "cpe:/a:redhat:rhel_eus:9.0"
              }
            }
          },
          {
            "category": "product_name",
            "name": "Red Hat Enterprise Linux 9.2.0.z",
            "product": {
              "name": "Red Hat Enterprise Linux 9.2.0.z",
              "product_id": "rhel-9.2.0.z.eus",
              "product_identification_helper": {
                "cpe": "cpe:/a:redhat:rhel_eus:9.2"
              }
            }
          },
          {
            "category": "product_name",
            "name": "Red Hat Enterprise Linux 9.4.z",
            "product": {
              "name": "Red Hat Enterprise Linux 9.4.z",
              "product_id": "rhel-9.4.z.eus",
              "product_identification_helper": {
                "cpe": "cpe:/a:redhat:rhel_eus:9.4"
              }
            }
          },
          {
            "category": "product_name",
            "name": "Red Hat Enterprise Linux 9.6.z",
            "product": {
              "name": "Red Hat Enterprise Linux 9.6.z",
              "product_id": "rhel-9.6.z.eus",
              "product_identification_helper": {
                "cpe": "cpe:/a:redhat:rhel_eus:9.6"
              }
            }
          },
          {
            "category": "product_name",
            "name": "Red Hat Enterprise Linux 9.7",
            "product": {
              "name": "Red Hat Enterprise Linux 9.7",
              "product_id": "rhel-9.7",
              "product_identification_helper": {
                "cpe": "cpe:/a:redhat:enterprise_linux:9"
              }
            }
          },
          {
            "category": "product_name",
            "name": "Red Hat Enterprise Linux 9.7.z",
            "product": {
              "name": "Red Hat Enterprise Linux 9.7.z",
              "product_id": "rhel-9.7.z",
              "product_identification_helper": {
                "cpe": "cpe:/a:redhat:enterprise_linux:9"
              }
            }
          },
          {
            "category": "product_name",
            "name": "Red Hat Enterprise Linux 9.8",
            "product": {
              "name": "Red Hat Enterprise Linux 9.8",
              "product_id": "rhel-9.8",
              "product_identification_helper": {
                "cpe": "cpe:/a:redhat:enterprise_linux:9"
              }
            }
          },
          {
            "category": "product_version",
            "name": "firefox",
            "product": {
              "name": "firefox",
              "product_id": "firefox",
              "product_identification_helper": {
                "purl": "pkg:rpm/redhat/firefox"
              }
            }
          },
          {
            "category": "product_version",
            "name": "firefox-debuginfo",
            "product": {
              "name": "firefox-debuginfo",
              "product_id": "firefox-debuginfo",
              "product_identification_helper": {
                "purl": "pkg:rpm/redhat/firefox-debuginfo"
              }
            }
          },
          {
            "category": "product_version",
            "name": "firefox-debugsource",
            "product": {
              "name": "firefox-debugsource",
              "product_id": "firefox-debugsource",
              "product_identification_helper": {
                "purl": "pkg:rpm/redhat/firefox-debugsource"
              }
            }
          },
          {
            "category": "product_version",
            "name": "firefox-x11",
            "product": {
              "name": "firefox-x11",
              "product_id": "firefox-x11",
              "product_identification_helper": {
                "purl": "pkg:rpm/redhat/firefox-x11"
              }
            }
          },
          {
            "category": "product_version",
            "name": "firefox",
            "product": {
              "name": "firefox",
              "product_id": "firefox.src",
              "product_identification_helper": {
                "purl": "pkg:rpm/redhat/firefox?arch=src"
              }
            }
          }
        ]
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox as a component of Red Hat Enterprise Linux 9.4.z",
          "product_id": "rhel-9.4.z.eus:firefox"
        },
        "product_reference": "firefox",
        "relates_to_product_reference": "rhel-9.4.z.eus"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox as a component of Red Hat Enterprise Linux 8.2.0.z",
          "product_id": "rhel-8.2.0.z.aus:firefox"
        },
        "product_reference": "firefox",
        "relates_to_product_reference": "rhel-8.2.0.z.aus"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox as a component of Red Hat Enterprise Linux 8.6.0.z",
          "product_id": "rhel-8.6.0.z.aus:firefox"
        },
        "product_reference": "firefox",
        "relates_to_product_reference": "rhel-8.6.0.z.aus"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox as a component of Red Hat Enterprise Linux 9.0.0.z",
          "product_id": "rhel-9.0.0.z.eus:firefox"
        },
        "product_reference": "firefox",
        "relates_to_product_reference": "rhel-9.0.0.z.eus"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox as a component of Red Hat Enterprise Linux 8.4.0.z",
          "product_id": "rhel-8.4.0.z.eus:firefox"
        },
        "product_reference": "firefox",
        "relates_to_product_reference": "rhel-8.4.0.z.eus"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox as a component of Red Hat Enterprise Linux 6-els",
          "product_id": "rhel-6-els.els:firefox"
        },
        "product_reference": "firefox",
        "relates_to_product_reference": "rhel-6-els.els"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox as a component of Red Hat Enterprise Linux 9.2.0.z",
          "product_id": "rhel-9.2.0.z.eus:firefox"
        },
        "product_reference": "firefox",
        "relates_to_product_reference": "rhel-9.2.0.z.eus"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox as a component of Red Hat Enterprise Linux 9.8",
          "product_id": "rhel-9.8:firefox"
        },
        "product_reference": "firefox",
        "relates_to_product_reference": "rhel-9.8"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox as a component of Red Hat Enterprise Linux 9.6.z",
          "product_id": "rhel-9.6.z.eus:firefox"
        },
        "product_reference": "firefox",
        "relates_to_product_reference": "rhel-9.6.z.eus"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox as a component of Red Hat Enterprise Linux 9.7",
          "product_id": "rhel-9.7:firefox"
        },
        "product_reference": "firefox",
        "relates_to_product_reference": "rhel-9.7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox as a component of Red Hat Enterprise Linux 8.10.z",
          "product_id": "rhel-8.10.z:firefox"
        },
        "product_reference": "firefox",
        "relates_to_product_reference": "rhel-8.10.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox as a component of Red Hat Enterprise Linux 9.7.z",
          "product_id": "rhel-9.7.z:firefox"
        },
        "product_reference": "firefox",
        "relates_to_product_reference": "rhel-9.7.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox as a component of Red Hat Enterprise Linux 7-els",
          "product_id": "rhel-7-els.els:firefox"
        },
        "product_reference": "firefox",
        "relates_to_product_reference": "rhel-7-els.els"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox as a component of Red Hat Enterprise Linux 8.8.0.z",
          "product_id": "rhel-8.8.0.z.eus:firefox"
        },
        "product_reference": "firefox",
        "relates_to_product_reference": "rhel-8.8.0.z.eus"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-debuginfo as a component of Red Hat Enterprise Linux 9.4.z",
          "product_id": "rhel-9.4.z.eus:firefox-debuginfo"
        },
        "product_reference": "firefox-debuginfo",
        "relates_to_product_reference": "rhel-9.4.z.eus"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-debuginfo as a component of Red Hat Enterprise Linux 8.4.0.z",
          "product_id": "rhel-8.4.0.z.eus:firefox-debuginfo"
        },
        "product_reference": "firefox-debuginfo",
        "relates_to_product_reference": "rhel-8.4.0.z.eus"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-debuginfo as a component of Red Hat Enterprise Linux 9.2.0.z",
          "product_id": "rhel-9.2.0.z.eus:firefox-debuginfo"
        },
        "product_reference": "firefox-debuginfo",
        "relates_to_product_reference": "rhel-9.2.0.z.eus"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-debuginfo as a component of Red Hat Enterprise Linux 9.6.z",
          "product_id": "rhel-9.6.z.eus:firefox-debuginfo"
        },
        "product_reference": "firefox-debuginfo",
        "relates_to_product_reference": "rhel-9.6.z.eus"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-debuginfo as a component of Red Hat Enterprise Linux 8.10.z",
          "product_id": "rhel-8.10.z:firefox-debuginfo"
        },
        "product_reference": "firefox-debuginfo",
        "relates_to_product_reference": "rhel-8.10.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-debuginfo as a component of Red Hat Enterprise Linux 8.8.0.z",
          "product_id": "rhel-8.8.0.z.eus:firefox-debuginfo"
        },
        "product_reference": "firefox-debuginfo",
        "relates_to_product_reference": "rhel-8.8.0.z.eus"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-debuginfo as a component of Red Hat Enterprise Linux 7-els",
          "product_id": "rhel-7-els.els:firefox-debuginfo"
        },
        "product_reference": "firefox-debuginfo",
        "relates_to_product_reference": "rhel-7-els.els"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-debuginfo as a component of Red Hat Enterprise Linux 8.6.0.z",
          "product_id": "rhel-8.6.0.z.aus:firefox-debuginfo"
        },
        "product_reference": "firefox-debuginfo",
        "relates_to_product_reference": "rhel-8.6.0.z.aus"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-debugsource as a component of Red Hat Enterprise Linux 8.6.0.z",
          "product_id": "rhel-8.6.0.z.aus:firefox-debugsource"
        },
        "product_reference": "firefox-debugsource",
        "relates_to_product_reference": "rhel-8.6.0.z.aus"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-debugsource as a component of Red Hat Enterprise Linux 8.8.0.z",
          "product_id": "rhel-8.8.0.z.eus:firefox-debugsource"
        },
        "product_reference": "firefox-debugsource",
        "relates_to_product_reference": "rhel-8.8.0.z.eus"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-debugsource as a component of Red Hat Enterprise Linux 9.4.z",
          "product_id": "rhel-9.4.z.eus:firefox-debugsource"
        },
        "product_reference": "firefox-debugsource",
        "relates_to_product_reference": "rhel-9.4.z.eus"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-debugsource as a component of Red Hat Enterprise Linux 8.10.z",
          "product_id": "rhel-8.10.z:firefox-debugsource"
        },
        "product_reference": "firefox-debugsource",
        "relates_to_product_reference": "rhel-8.10.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-debugsource as a component of Red Hat Enterprise Linux 8.4.0.z",
          "product_id": "rhel-8.4.0.z.eus:firefox-debugsource"
        },
        "product_reference": "firefox-debugsource",
        "relates_to_product_reference": "rhel-8.4.0.z.eus"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-debugsource as a component of Red Hat Enterprise Linux 9.6.z",
          "product_id": "rhel-9.6.z.eus:firefox-debugsource"
        },
        "product_reference": "firefox-debugsource",
        "relates_to_product_reference": "rhel-9.6.z.eus"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-debugsource as a component of Red Hat Enterprise Linux 9.2.0.z",
          "product_id": "rhel-9.2.0.z.eus:firefox-debugsource"
        },
        "product_reference": "firefox-debugsource",
        "relates_to_product_reference": "rhel-9.2.0.z.eus"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-x11 as a component of Red Hat Enterprise Linux 9.6.z",
          "product_id": "rhel-9.6.z.eus:firefox-x11"
        },
        "product_reference": "firefox-x11",
        "relates_to_product_reference": "rhel-9.6.z.eus"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-x11 as a component of Red Hat Enterprise Linux 9.7",
          "product_id": "rhel-9.7:firefox-x11"
        },
        "product_reference": "firefox-x11",
        "relates_to_product_reference": "rhel-9.7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-x11 as a component of Red Hat Enterprise Linux 9.8",
          "product_id": "rhel-9.8:firefox-x11"
        },
        "product_reference": "firefox-x11",
        "relates_to_product_reference": "rhel-9.8"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-x11 as a component of Red Hat Enterprise Linux 9.2.0.z",
          "product_id": "rhel-9.2.0.z.eus:firefox-x11"
        },
        "product_reference": "firefox-x11",
        "relates_to_product_reference": "rhel-9.2.0.z.eus"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-x11 as a component of Red Hat Enterprise Linux 9.7.z",
          "product_id": "rhel-9.7.z:firefox-x11"
        },
        "product_reference": "firefox-x11",
        "relates_to_product_reference": "rhel-9.7.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-x11 as a component of Red Hat Enterprise Linux 9.0.0.z",
          "product_id": "rhel-9.0.0.z.eus:firefox-x11"
        },
        "product_reference": "firefox-x11",
        "relates_to_product_reference": "rhel-9.0.0.z.eus"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-x11 as a component of Red Hat Enterprise Linux 9.4.z",
          "product_id": "rhel-9.4.z.eus:firefox-x11"
        },
        "product_reference": "firefox-x11",
        "relates_to_product_reference": "rhel-9.4.z.eus"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox.src as a component of Red Hat Enterprise Linux 8.4.0.z",
          "product_id": "rhel-8.4.0.z.eus:firefox.src"
        },
        "product_reference": "firefox.src",
        "relates_to_product_reference": "rhel-8.4.0.z.eus"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox.src as a component of Red Hat Enterprise Linux 9.8",
          "product_id": "rhel-9.8:firefox.src"
        },
        "product_reference": "firefox.src",
        "relates_to_product_reference": "rhel-9.8"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox.src as a component of Red Hat Enterprise Linux 9.2.0.z",
          "product_id": "rhel-9.2.0.z.eus:firefox.src"
        },
        "product_reference": "firefox.src",
        "relates_to_product_reference": "rhel-9.2.0.z.eus"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox.src as a component of Red Hat Enterprise Linux 6-els",
          "product_id": "rhel-6-els.els:firefox.src"
        },
        "product_reference": "firefox.src",
        "relates_to_product_reference": "rhel-6-els.els"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox.src as a component of Red Hat Enterprise Linux 9.7",
          "product_id": "rhel-9.7:firefox.src"
        },
        "product_reference": "firefox.src",
        "relates_to_product_reference": "rhel-9.7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox.src as a component of Red Hat Enterprise Linux 9.6.z",
          "product_id": "rhel-9.6.z.eus:firefox.src"
        },
        "product_reference": "firefox.src",
        "relates_to_product_reference": "rhel-9.6.z.eus"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox.src as a component of Red Hat Enterprise Linux 8.10.z",
          "product_id": "rhel-8.10.z:firefox.src"
        },
        "product_reference": "firefox.src",
        "relates_to_product_reference": "rhel-8.10.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox.src as a component of Red Hat Enterprise Linux 9.7.z",
          "product_id": "rhel-9.7.z:firefox.src"
        },
        "product_reference": "firefox.src",
        "relates_to_product_reference": "rhel-9.7.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox.src as a component of Red Hat Enterprise Linux 7-els",
          "product_id": "rhel-7-els.els:firefox.src"
        },
        "product_reference": "firefox.src",
        "relates_to_product_reference": "rhel-7-els.els"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox.src as a component of Red Hat Enterprise Linux 9.0.0.z",
          "product_id": "rhel-9.0.0.z.eus:firefox.src"
        },
        "product_reference": "firefox.src",
        "relates_to_product_reference": "rhel-9.0.0.z.eus"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox.src as a component of Red Hat Enterprise Linux 8.8.0.z",
          "product_id": "rhel-8.8.0.z.eus:firefox.src"
        },
        "product_reference": "firefox.src",
        "relates_to_product_reference": "rhel-8.8.0.z.eus"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox.src as a component of Red Hat Enterprise Linux 8.2.0.z",
          "product_id": "rhel-8.2.0.z.aus:firefox.src"
        },
        "product_reference": "firefox.src",
        "relates_to_product_reference": "rhel-8.2.0.z.aus"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox.src as a component of Red Hat Enterprise Linux 8.6.0.z",
          "product_id": "rhel-8.6.0.z.aus:firefox.src"
        },
        "product_reference": "firefox.src",
        "relates_to_product_reference": "rhel-8.6.0.z.aus"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox.src as a component of Red Hat Enterprise Linux 9.4.z",
          "product_id": "rhel-9.4.z.eus:firefox.src"
        },
        "product_reference": "firefox.src",
        "relates_to_product_reference": "rhel-9.4.z.eus"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2023-25740",
      "discovery_date": "2023-02-14T00:00:00+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "rhel-6-els.els:firefox",
            "rhel-6-els.els:firefox.src",
            "rhel-7-els.els:firefox",
            "rhel-7-els.els:firefox-debuginfo",
            "rhel-7-els.els:firefox.src",
            "rhel-8.10.z:firefox",
            "rhel-8.10.z:firefox-debuginfo",
            "rhel-8.10.z:firefox-debugsource",
            "rhel-8.10.z:firefox.src",
            "rhel-8.2.0.z.aus:firefox",
            "rhel-8.2.0.z.aus:firefox.src",
            "rhel-8.4.0.z.eus:firefox",
            "rhel-8.4.0.z.eus:firefox-debuginfo",
            "rhel-8.4.0.z.eus:firefox-debugsource",
            "rhel-8.4.0.z.eus:firefox.src",
            "rhel-8.6.0.z.aus:firefox",
            "rhel-8.6.0.z.aus:firefox-debuginfo",
            "rhel-8.6.0.z.aus:firefox-debugsource",
            "rhel-8.6.0.z.aus:firefox.src",
            "rhel-8.8.0.z.eus:firefox",
            "rhel-8.8.0.z.eus:firefox-debuginfo",
            "rhel-8.8.0.z.eus:firefox-debugsource",
            "rhel-8.8.0.z.eus:firefox.src",
            "rhel-9.0.0.z.eus:firefox",
            "rhel-9.0.0.z.eus:firefox-x11",
            "rhel-9.0.0.z.eus:firefox.src",
            "rhel-9.2.0.z.eus:firefox",
            "rhel-9.2.0.z.eus:firefox-debuginfo",
            "rhel-9.2.0.z.eus:firefox-debugsource",
            "rhel-9.2.0.z.eus:firefox-x11",
            "rhel-9.2.0.z.eus:firefox.src",
            "rhel-9.4.z.eus:firefox",
            "rhel-9.4.z.eus:firefox-debuginfo",
            "rhel-9.4.z.eus:firefox-debugsource",
            "rhel-9.4.z.eus:firefox-x11",
            "rhel-9.4.z.eus:firefox.src",
            "rhel-9.6.z.eus:firefox",
            "rhel-9.6.z.eus:firefox-debuginfo",
            "rhel-9.6.z.eus:firefox-debugsource",
            "rhel-9.6.z.eus:firefox-x11",
            "rhel-9.6.z.eus:firefox.src",
            "rhel-9.7.z:firefox",
            "rhel-9.7.z:firefox-x11",
            "rhel-9.7.z:firefox.src",
            "rhel-9.7:firefox",
            "rhel-9.7:firefox-x11",
            "rhel-9.7:firefox.src",
            "rhel-9.8:firefox",
            "rhel-9.8:firefox-x11",
            "rhel-9.8:firefox.src"
          ]
        }
      ],
      "notes": [
        {
          "category": "other",
          "text": "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.",
          "title": "Statement"
        },
        {
          "category": "description",
          "text": "The Mozilla Foundation Security Advisory: After downloading a Windows `.scf` script from the local filesystem, an attacker could supply a remote path that would lead to unexpected network requests from the operating system. This also had the potential to leak NTLM credentials to the resource. This bug only affects Firefox for Windows. Other operating systems are unaffected.",
          "title": "Vulnerability description"
        }
      ],
      "product_status": {
        "known_not_affected": [
          "rhel-6-els.els:firefox",
          "rhel-6-els.els:firefox.src",
          "rhel-7-els.els:firefox",
          "rhel-7-els.els:firefox-debuginfo",
          "rhel-7-els.els:firefox.src",
          "rhel-8.10.z:firefox",
          "rhel-8.10.z:firefox-debuginfo",
          "rhel-8.10.z:firefox-debugsource",
          "rhel-8.10.z:firefox.src",
          "rhel-8.2.0.z.aus:firefox",
          "rhel-8.2.0.z.aus:firefox.src",
          "rhel-8.4.0.z.eus:firefox",
          "rhel-8.4.0.z.eus:firefox-debuginfo",
          "rhel-8.4.0.z.eus:firefox-debugsource",
          "rhel-8.4.0.z.eus:firefox.src",
          "rhel-8.6.0.z.aus:firefox",
          "rhel-8.6.0.z.aus:firefox-debuginfo",
          "rhel-8.6.0.z.aus:firefox-debugsource",
          "rhel-8.6.0.z.aus:firefox.src",
          "rhel-8.8.0.z.eus:firefox",
          "rhel-8.8.0.z.eus:firefox-debuginfo",
          "rhel-8.8.0.z.eus:firefox-debugsource",
          "rhel-8.8.0.z.eus:firefox.src",
          "rhel-9.0.0.z.eus:firefox",
          "rhel-9.0.0.z.eus:firefox-x11",
          "rhel-9.0.0.z.eus:firefox.src",
          "rhel-9.2.0.z.eus:firefox",
          "rhel-9.2.0.z.eus:firefox-debuginfo",
          "rhel-9.2.0.z.eus:firefox-debugsource",
          "rhel-9.2.0.z.eus:firefox-x11",
          "rhel-9.2.0.z.eus:firefox.src",
          "rhel-9.4.z.eus:firefox",
          "rhel-9.4.z.eus:firefox-debuginfo",
          "rhel-9.4.z.eus:firefox-debugsource",
          "rhel-9.4.z.eus:firefox-x11",
          "rhel-9.4.z.eus:firefox.src",
          "rhel-9.6.z.eus:firefox",
          "rhel-9.6.z.eus:firefox-debuginfo",
          "rhel-9.6.z.eus:firefox-debugsource",
          "rhel-9.6.z.eus:firefox-x11",
          "rhel-9.6.z.eus:firefox.src",
          "rhel-9.7.z:firefox",
          "rhel-9.7.z:firefox-x11",
          "rhel-9.7.z:firefox.src",
          "rhel-9.7:firefox",
          "rhel-9.7:firefox-x11",
          "rhel-9.7:firefox.src",
          "rhel-9.8:firefox",
          "rhel-9.8:firefox-x11",
          "rhel-9.8:firefox.src"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2023-25740"
        },
        {
          "category": "external",
          "summary": "nvd.nist.gov",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-25740"
        },
        {
          "category": "external",
          "summary": "www.cve.org",
          "url": "https://www.cve.org/CVERecord?id=CVE-2023-25740"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "version": "3.1",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore": 6.1,
            "baseSeverity": "MEDIUM"
          },
          "products": [
            "rhel-6-els.els:firefox",
            "rhel-6-els.els:firefox.src",
            "rhel-7-els.els:firefox",
            "rhel-7-els.els:firefox-debuginfo",
            "rhel-7-els.els:firefox.src",
            "rhel-8.10.z:firefox",
            "rhel-8.10.z:firefox-debuginfo",
            "rhel-8.10.z:firefox-debugsource",
            "rhel-8.10.z:firefox.src",
            "rhel-8.2.0.z.aus:firefox",
            "rhel-8.2.0.z.aus:firefox.src",
            "rhel-8.4.0.z.eus:firefox",
            "rhel-8.4.0.z.eus:firefox-debuginfo",
            "rhel-8.4.0.z.eus:firefox-debugsource",
            "rhel-8.4.0.z.eus:firefox.src",
            "rhel-8.6.0.z.aus:firefox",
            "rhel-8.6.0.z.aus:firefox-debuginfo",
            "rhel-8.6.0.z.aus:firefox-debugsource",
            "rhel-8.6.0.z.aus:firefox.src",
            "rhel-8.8.0.z.eus:firefox",
            "rhel-8.8.0.z.eus:firefox-debuginfo",
            "rhel-8.8.0.z.eus:firefox-debugsource",
            "rhel-8.8.0.z.eus:firefox.src",
            "rhel-9.0.0.z.eus:firefox",
            "rhel-9.0.0.z.eus:firefox-x11",
            "rhel-9.0.0.z.eus:firefox.src",
            "rhel-9.2.0.z.eus:firefox",
            "rhel-9.2.0.z.eus:firefox-debuginfo",
            "rhel-9.2.0.z.eus:firefox-debugsource",
            "rhel-9.2.0.z.eus:firefox-x11",
            "rhel-9.2.0.z.eus:firefox.src",
            "rhel-9.4.z.eus:firefox",
            "rhel-9.4.z.eus:firefox-debuginfo",
            "rhel-9.4.z.eus:firefox-debugsource",
            "rhel-9.4.z.eus:firefox-x11",
            "rhel-9.4.z.eus:firefox.src",
            "rhel-9.6.z.eus:firefox",
            "rhel-9.6.z.eus:firefox-debuginfo",
            "rhel-9.6.z.eus:firefox-debugsource",
            "rhel-9.6.z.eus:firefox-x11",
            "rhel-9.6.z.eus:firefox.src",
            "rhel-9.7.z:firefox",
            "rhel-9.7.z:firefox-x11",
            "rhel-9.7.z:firefox.src",
            "rhel-9.7:firefox",
            "rhel-9.7:firefox-x11",
            "rhel-9.7:firefox.src",
            "rhel-9.8:firefox",
            "rhel-9.8:firefox-x11",
            "rhel-9.8:firefox.src"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate",
          "product_ids": [
            "rhel-6-els.els:firefox",
            "rhel-6-els.els:firefox.src",
            "rhel-7-els.els:firefox",
            "rhel-7-els.els:firefox-debuginfo",
            "rhel-7-els.els:firefox.src",
            "rhel-8.10.z:firefox",
            "rhel-8.10.z:firefox-debuginfo",
            "rhel-8.10.z:firefox-debugsource",
            "rhel-8.10.z:firefox.src",
            "rhel-8.2.0.z.aus:firefox",
            "rhel-8.2.0.z.aus:firefox.src",
            "rhel-8.4.0.z.eus:firefox",
            "rhel-8.4.0.z.eus:firefox-debuginfo",
            "rhel-8.4.0.z.eus:firefox-debugsource",
            "rhel-8.4.0.z.eus:firefox.src",
            "rhel-8.6.0.z.aus:firefox",
            "rhel-8.6.0.z.aus:firefox-debuginfo",
            "rhel-8.6.0.z.aus:firefox-debugsource",
            "rhel-8.6.0.z.aus:firefox.src",
            "rhel-8.8.0.z.eus:firefox",
            "rhel-8.8.0.z.eus:firefox-debuginfo",
            "rhel-8.8.0.z.eus:firefox-debugsource",
            "rhel-8.8.0.z.eus:firefox.src",
            "rhel-9.0.0.z.eus:firefox",
            "rhel-9.0.0.z.eus:firefox-x11",
            "rhel-9.0.0.z.eus:firefox.src",
            "rhel-9.2.0.z.eus:firefox",
            "rhel-9.2.0.z.eus:firefox-debuginfo",
            "rhel-9.2.0.z.eus:firefox-debugsource",
            "rhel-9.2.0.z.eus:firefox-x11",
            "rhel-9.2.0.z.eus:firefox.src",
            "rhel-9.4.z.eus:firefox",
            "rhel-9.4.z.eus:firefox-debuginfo",
            "rhel-9.4.z.eus:firefox-debugsource",
            "rhel-9.4.z.eus:firefox-x11",
            "rhel-9.4.z.eus:firefox.src",
            "rhel-9.6.z.eus:firefox",
            "rhel-9.6.z.eus:firefox-debuginfo",
            "rhel-9.6.z.eus:firefox-debugsource",
            "rhel-9.6.z.eus:firefox-x11",
            "rhel-9.6.z.eus:firefox.src",
            "rhel-9.7.z:firefox",
            "rhel-9.7.z:firefox-x11",
            "rhel-9.7.z:firefox.src",
            "rhel-9.7:firefox",
            "rhel-9.7:firefox-x11",
            "rhel-9.7:firefox.src",
            "rhel-9.8:firefox",
            "rhel-9.8:firefox-x11",
            "rhel-9.8:firefox.src"
          ]
        }
      ],
      "title": "Opening local .scf files could cause unexpected network loads"
    }
  ]
}