Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

debian логотип

CVE-2021-43536

Опубликовано: 08 дек. 2021
Источник: debian

Описание

Under certain circumstances, asynchronous functions could have caused a navigation to fail but expose the target URL. This vulnerability affects Thunderbird < 91.4.0, Firefox ESR < 91.4.0, and Firefox < 95.

Пакеты

ПакетСтатусВерсия исправленияРелизТип
firefoxfixed95.0-1package
firefox-esrfixed91.4.0esr-1package
thunderbirdfixed1:91.4.0-1package

Примечания

  • https://www.mozilla.org/en-US/security/advisories/mfsa2021-52/#CVE-2021-43536

  • https://www.mozilla.org/en-US/security/advisories/mfsa2021-53/#CVE-2021-43536

  • https://www.mozilla.org/en-US/security/advisories/mfsa2021-54/#CVE-2021-43536

Связанные уязвимости

CVSS3: 6.5
ubuntu
около 4 лет назад

Under certain circumstances, asynchronous functions could have caused a navigation to fail but expose the target URL. This vulnerability affects Thunderbird < 91.4.0, Firefox ESR < 91.4.0, and Firefox < 95.

CVSS3: 7.5
redhat
около 4 лет назад

Under certain circumstances, asynchronous functions could have caused a navigation to fail but expose the target URL. This vulnerability affects Thunderbird < 91.4.0, Firefox ESR < 91.4.0, and Firefox < 95.

CVSS3: 6.5
nvd
около 4 лет назад

Under certain circumstances, asynchronous functions could have caused a navigation to fail but expose the target URL. This vulnerability affects Thunderbird < 91.4.0, Firefox ESR < 91.4.0, and Firefox < 95.

CVSS3: 6.5
github
около 4 лет назад

Under certain circumstances, asynchronous functions could have caused a navigation to fail but expose the target URL. This vulnerability affects Thunderbird < 91.4.0, Firefox ESR < 91.4.0, and Firefox < 95.

CVSS3: 4.3
fstec
около 4 лет назад

Уязвимость браузера Mozilla Firefox и почтового клиента Mozilla Thunderbird, связанная с раскрытием информации, позволяющая нарушителю получить доступ к конфиденциальной информации