Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

ubuntu логотип

CVE-2021-23957

Опубликовано: 26 фев. 2021
Источник: ubuntu
Приоритет: medium
CVSS2: 4.3
CVSS3: 7.4

Описание

Navigations through the Android-specific intent URL scheme could have been misused to escape iframe sandbox. Note: This issue only affected Firefox for Android. Other operating systems are unaffected. This vulnerability affects Firefox < 85.

РелизСтатусПримечание
bionic

not-affected

Android only
devel

not-affected

Android only
esm-infra-legacy/trusty

DNE

esm-infra/focal

DNE

focal

not-affected

Android only
groovy

not-affected

Android only
precise/esm

DNE

trusty

ignored

end of standard support
trusty/esm

DNE

upstream

not-affected

debian: Only affects Firefox for Android

Показывать по

РелизСтатусПримечание
bionic

not-affected

Android only
devel

DNE

esm-apps/bionic

not-affected

Android only
esm-infra-legacy/trusty

DNE

esm-infra/focal

DNE

focal

DNE

groovy

DNE

precise/esm

DNE

trusty

DNE

trusty/esm

DNE

Показывать по

РелизСтатусПримечание
bionic

not-affected

Android only
devel

not-affected

Android only
esm-apps/focal

not-affected

Android only
esm-infra-legacy/trusty

DNE

esm-infra/bionic

not-affected

Android only
focal

not-affected

Android only
groovy

not-affected

Android only
precise/esm

DNE

trusty

DNE

trusty/esm

DNE

Показывать по

РелизСтатусПримечание
bionic

DNE

devel

DNE

esm-infra-legacy/trusty

DNE

esm-infra/focal

DNE

focal

DNE

groovy

DNE

precise/esm

DNE

trusty

DNE

trusty/esm

DNE

upstream

not-affected

Android only

Показывать по

РелизСтатусПримечание
bionic

DNE

devel

DNE

esm-infra-legacy/trusty

DNE

esm-infra/focal

not-affected

Android only
focal

not-affected

Android only
groovy

not-affected

Android only
precise/esm

DNE

trusty

DNE

trusty/esm

DNE

upstream

not-affected

Android only

Показывать по

РелизСтатусПримечание
bionic

DNE

devel

not-affected

Android only
esm-infra-legacy/trusty

DNE

esm-infra/focal

DNE

focal

DNE

groovy

not-affected

Android only
precise/esm

DNE

trusty

DNE

trusty/esm

DNE

upstream

not-affected

Android only

Показывать по

РелизСтатусПримечание
bionic

not-affected

Android only
devel

not-affected

Android only
esm-infra-legacy/trusty

DNE

esm-infra/focal

DNE

focal

not-affected

Android only
groovy

not-affected

Android only
precise/esm

DNE

trusty

ignored

end of standard support
trusty/esm

DNE

upstream

not-affected

Android only

Показывать по

4.3 Medium

CVSS2

7.4 High

CVSS3

Связанные уязвимости

CVSS3: 7.4
nvd
почти 5 лет назад

Navigations through the Android-specific `intent` URL scheme could have been misused to escape iframe sandbox. Note: This issue only affected Firefox for Android. Other operating systems are unaffected. This vulnerability affects Firefox < 85.

CVSS3: 7.4
debian
почти 5 лет назад

Navigations through the Android-specific `intent` URL scheme could hav ...

github
больше 3 лет назад

Navigations through the Android-specific `intent` URL scheme could have been misused to escape iframe sandbox. Note: This issue only affected Firefox for Android. Other operating systems are unaffected. This vulnerability affects Firefox < 85.

CVSS3: 7.4
fstec
около 5 лет назад

Уязвимость изолированной среды iframe браузера Firefox for Android, позволяющая нарушителю оказать воздействие на целостность данных

4.3 Medium

CVSS2

7.4 High

CVSS3