CVE-2021-23984

 

Published at: - 31-03-2021 04:15

Last modified: - 24-09-2022 03:03

Total changes: - 7

Description

A malicious extension could have opened a popup window lacking an address bar. The title of the popup lacking an address bar should not be fully controllable, but in this situation was. This could have been used to spoof a website and attempt to trick the user into providing credentials. This vulnerability affects Firefox ESR < 78.9, Firefox < 87, and Thunderbird < 78.9.

Common Vulnerability Scoring System (CVSS)

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

 

Verification logic

 

Reference

• https://www.mozilla.org/security/advisories/mfsa2021-11/
• https://www.mozilla.org/security/advisories/mfsa2021-12/
• https://www.mozilla.org/security/advisories/mfsa2021-10/
• https://bugzilla.mozilla.org/show_bug.cgi?id=1693664

 

Keywords

NVD

 

CVE-2021-23984

 

CVE

 

Common vulnerabilities & exposures

 

CVSS

 

Common vulnerability scoring system

 

Security

 

Vulnerabilities

 

Exposures