20231124001-Mozilla-Security-Updates-for-Firefox-and-Thunderbird (#419)

* 20231027001-Roundcube Webmail Persistent Cross-Site Scripting (XSS) Vulnerability

* 20231031001-VVMware-Tools-Multiple-Vulnerabilities

* 20231031001-VMware-Tools-Multiple-Vulnerabilities

* 20231106001-Cisco-Security-Advisories-for-Multiple-Products-vulnerability

* 20231106001-Cisco-Security-Advisories-for-Multiple-Products-vulnerability

* 20231109001-Service-Location-Protocol(SLP)-Denial-of-Service-Vulnerability

* 20231114001-SysAid-Server-Path-Traversal-Known-Exploited-vulnerability

* Update 20231109001-Service-Location-Protocol(SLP)-Denial-of-Service-Vulnerability.md

* Update 20231114001-SysAid-Server-Path-Traversal-Known-Exploited-vulnerability.md

* 20231115002-Mware-Security-Update-Cloud-Director-Appliance

* 20231115002-Mware-Security-Update-Cloud-Director-Appliance

* 20231117001-Oracle-Fusion-Middleware-PHP-Remote-File-Inclusion-Vulnerability

* 20231117001-Oracle-Fusion-Middleware-PHP-Remote-File-Inclusion-Vulnerability

* 20231117001-Oracle-Fusion-Middleware-PHP-Remote-File-Inclusion-Vulnerability

* 20231124001-Mozilla-Security-Updates-for-Firefox-and-Thunderbird

---------

Co-authored-by: Joshua Hitchen (DGov) <[email protected]>
Co-authored-by: Adon Metcalfe <[email protected]>

Author: 3 people

docs/advisories/20231124001-Mozilla-Security-Updates-for-Firefox-and-Thunderbird.md

@@ -0,0 +1,29 @@
+# Mozilla Releases Security Updates for Firefox and Thunderbird - 20231124001
+
+## Overview
+
+Mozilla has released security updates to address vulnerabilities in Firefox and Thunderbird. A cyber threat actor could exploit some of these vulnerabilities to take control of an affected system.
+
+
+## What is vulnerable?
+
+The vulnerability affects the following products:
+
+- [Firefox iOS 120](https://www.mozilla.org/en-US/security/advisories/mfsa2023-51/)
+- [Firefox 120](https://www.mozilla.org/en-US/security/advisories/mfsa2023-49/)
+- [Firefox ESR 115.5](https://www.mozilla.org/en-US/security/advisories/mfsa2023-50/)
+- [Thunderbird 115.5.0](https://www.mozilla.org/en-US/security/advisories/mfsa2023-52/)
+
+## What has been observed?
+
+There is no evidence of exploitation affecting Western Australian Government networks at the time of publishing.
+
+## Recommendation
+
+The WA SOC recommends administrators apply the solutions as per vendor instructions to all affected devices within expected timeframe of *one month* (refer [Patch Management](../guidelines/patch-management.md)):
+
+- [Mozilla Security Advisory](https://www.mozilla.org/en-US/security/advisories/)
+
+## Additional References
+
+- [CISA](https://www.cisa.gov/news-events/alerts/2023/11/22/mozilla-releases-security-updates-firefox-and-thunderbird)