Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

ubuntu логотип

CVE-2021-23959

Опубликовано: 26 фев. 2021
Источник: ubuntu
Приоритет: medium
EPSS Низкий
CVSS2: 4.3
CVSS3: 6.1

Описание

An XSS bug in internal error pages could have led to various spoofing attacks, including other error pages and the address bar. Note: This issue only affected Firefox for Android. Other operating systems are unaffected. This vulnerability affects Firefox < 85.

РелизСтатусПримечание
bionic

not-affected

Android only
devel

not-affected

Android only
esm-infra-legacy/trusty

DNE

esm-infra/focal

DNE

focal

not-affected

Android only
groovy

not-affected

Android only
precise/esm

DNE

trusty

ignored

end of standard support
trusty/esm

DNE

upstream

not-affected

debian: Only affects Firefox for Android

Показывать по

РелизСтатусПримечание
bionic

not-affected

Android only
devel

DNE

esm-apps/bionic

not-affected

Android only
esm-infra-legacy/trusty

DNE

esm-infra/focal

DNE

focal

DNE

groovy

DNE

precise/esm

DNE

trusty

DNE

trusty/esm

DNE

Показывать по

РелизСтатусПримечание
bionic

not-affected

Android only
devel

not-affected

Android only
esm-apps/focal

not-affected

Android only
esm-infra-legacy/trusty

DNE

esm-infra/bionic

not-affected

Android only
focal

not-affected

Android only
groovy

not-affected

Android only
precise/esm

DNE

trusty

DNE

trusty/esm

DNE

Показывать по

РелизСтатусПримечание
bionic

DNE

devel

DNE

esm-infra-legacy/trusty

DNE

esm-infra/focal

DNE

focal

DNE

groovy

DNE

precise/esm

DNE

trusty

DNE

trusty/esm

DNE

upstream

not-affected

Android only

Показывать по

РелизСтатусПримечание
bionic

DNE

devel

DNE

esm-infra-legacy/trusty

DNE

esm-infra/focal

not-affected

Android only
focal

not-affected

Android only
groovy

not-affected

Android only
precise/esm

DNE

trusty

DNE

trusty/esm

DNE

upstream

not-affected

Android only

Показывать по

РелизСтатусПримечание
bionic

DNE

devel

not-affected

Android only
esm-infra-legacy/trusty

DNE

esm-infra/focal

DNE

focal

DNE

groovy

not-affected

Android only
precise/esm

DNE

trusty

DNE

trusty/esm

DNE

upstream

not-affected

Android only

Показывать по

РелизСтатусПримечание
bionic

not-affected

Android only
devel

not-affected

Android only
esm-infra-legacy/trusty

DNE

esm-infra/focal

DNE

focal

not-affected

Android only
groovy

not-affected

Android only
precise/esm

DNE

trusty

ignored

end of standard support
trusty/esm

DNE

upstream

not-affected

Android only

Показывать по

EPSS

Процентиль: 53%
0.00302
Низкий

4.3 Medium

CVSS2

6.1 Medium

CVSS3

Связанные уязвимости

CVSS3: 6.1
nvd
почти 5 лет назад

An XSS bug in internal error pages could have led to various spoofing attacks, including other error pages and the address bar. Note: This issue only affected Firefox for Android. Other operating systems are unaffected. This vulnerability affects Firefox < 85.

CVSS3: 6.1
debian
почти 5 лет назад

An XSS bug in internal error pages could have led to various spoofing ...

github
больше 3 лет назад

An XSS bug in internal error pages could have led to various spoofing attacks, including other error pages and the address bar. Note: This issue only affected Firefox for Android. Other operating systems are unaffected. This vulnerability affects Firefox < 85.

CVSS3: 6.1
fstec
около 5 лет назад

Уязвимость браузера Mozilla Firefox, связанная с непринятием мер по защите структуры веб-страницы, позволяющая нарушителю осуществлять межсайтовые сценарные атаки

EPSS

Процентиль: 53%
0.00302
Низкий

4.3 Medium

CVSS2

6.1 Medium

CVSS3