Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

ubuntu логотип

CVE-2021-43544

Опубликовано: 08 дек. 2021
Источник: ubuntu
Приоритет: medium
EPSS Низкий
CVSS2: 4.3
CVSS3: 6.1

Описание

When receiving a URL through a SEND intent, Firefox would have searched for the text, but subsequent usages of the address bar might have caused the URL to load unintentionally, which could lead to XSS and spoofing attacks. This bug only affects Firefox for Android. Other operating systems are unaffected.. This vulnerability affects Firefox < 95.

РелизСтатусПримечание
bionic

not-affected

Android only
devel

not-affected

Android only
esm-infra-legacy/trusty

DNE

esm-infra/focal

DNE

focal

not-affected

Android only
hirsute

not-affected

Android only
impish

not-affected

Android only
jammy

not-affected

Android only
trusty

ignored

end of standard support
trusty/esm

DNE

Показывать по

EPSS

Процентиль: 59%
0.0038
Низкий

4.3 Medium

CVSS2

6.1 Medium

CVSS3

Связанные уязвимости

CVSS3: 6.1
nvd
около 4 лет назад

When receiving a URL through a SEND intent, Firefox would have searched for the text, but subsequent usages of the address bar might have caused the URL to load unintentionally, which could lead to XSS and spoofing attacks. *This bug only affects Firefox for Android. Other operating systems are unaffected.*. This vulnerability affects Firefox < 95.

CVSS3: 6.1
debian
около 4 лет назад

When receiving a URL through a SEND intent, Firefox would have searche ...

github
около 4 лет назад

When receiving a URL through a SEND intent, Firefox would have searched for the text, but subsequent usages of the address bar might have caused the URL to load unintentionally, which could lead to XSS and spoofing attacks. *This bug only affects Firefox for Android. Other operating systems are unaffected.*. This vulnerability affects Firefox < 95.

EPSS

Процентиль: 59%
0.0038
Низкий

4.3 Medium

CVSS2

6.1 Medium

CVSS3