Логотип exploitDog
bind:CVE-2021-23969
Консоль
Логотип exploitDog

exploitDog

bind:CVE-2021-23969

Количество 16

Количество 16

ubuntu логотип

CVE-2021-23969

почти 5 лет назад

As specified in the W3C Content Security Policy draft, when creating a violation report, "User agents need to ensure that the source file is the URL requested by the page, pre-redirects. If that’s not possible, user agents need to strip the URL down to an origin to avoid unintentional leakage." Under certain types of redirects, Firefox incorrectly set the source file to be the destination of the redirects. This was fixed to be the redirect destination's origin. This vulnerability affects Firefox < 86, Thunderbird < 78.8, and Firefox ESR < 78.8.

CVSS3: 4.3
EPSS: Низкий
redhat логотип

CVE-2021-23969

почти 5 лет назад

As specified in the W3C Content Security Policy draft, when creating a violation report, "User agents need to ensure that the source file is the URL requested by the page, pre-redirects. If that’s not possible, user agents need to strip the URL down to an origin to avoid unintentional leakage." Under certain types of redirects, Firefox incorrectly set the source file to be the destination of the redirects. This was fixed to be the redirect destination's origin. This vulnerability affects Firefox < 86, Thunderbird < 78.8, and Firefox ESR < 78.8.

CVSS3: 4.3
EPSS: Низкий
nvd логотип

CVE-2021-23969

почти 5 лет назад

As specified in the W3C Content Security Policy draft, when creating a violation report, "User agents need to ensure that the source file is the URL requested by the page, pre-redirects. If that’s not possible, user agents need to strip the URL down to an origin to avoid unintentional leakage." Under certain types of redirects, Firefox incorrectly set the source file to be the destination of the redirects. This was fixed to be the redirect destination's origin. This vulnerability affects Firefox < 86, Thunderbird < 78.8, and Firefox ESR < 78.8.

CVSS3: 4.3
EPSS: Низкий
debian логотип

CVE-2021-23969

почти 5 лет назад

As specified in the W3C Content Security Policy draft, when creating a ...

CVSS3: 4.3
EPSS: Низкий
github логотип

GHSA-hrpc-c9c2-pj6w

больше 3 лет назад

As specified in the W3C Content Security Policy draft, when creating a violation report, "User agents need to ensure that the source file is the URL requested by the page, pre-redirects. If that’s not possible, user agents need to strip the URL down to an origin to avoid unintentional leakage." Under certain types of redirects, Firefox incorrectly set the source file to be the destination of the redirects. This was fixed to be the redirect destination's origin. This vulnerability affects Firefox < 86, Thunderbird < 78.8, and Firefox ESR < 78.8.

CVSS3: 4.3
EPSS: Низкий
suse-cvrf логотип

openSUSE-SU-2021:0387-1

почти 5 лет назад

Security update for MozillaThunderbird

EPSS: Низкий
suse-cvrf логотип

openSUSE-SU-2021:0373-1

почти 5 лет назад

Security update for MozillaFirefox

EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2021:14657-1

почти 5 лет назад

Security update for MozillaFirefox

EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2021:0676-1

почти 5 лет назад

Security update for MozillaFirefox

EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2021:0667-1

почти 5 лет назад

Security update for MozillaFirefox

EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2021:0661-1

почти 5 лет назад

Security update for MozillaThunderbird

EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2021:0659-1

почти 5 лет назад

Security update for MozillaFirefox

EPSS: Низкий
oracle-oval логотип

ELSA-2021-0661

почти 5 лет назад

ELSA-2021-0661: thunderbird security update (IMPORTANT)

EPSS: Низкий
oracle-oval логотип

ELSA-2021-0657

почти 5 лет назад

ELSA-2021-0657: thunderbird security update (IMPORTANT)

EPSS: Низкий
oracle-oval логотип

ELSA-2021-0656

почти 5 лет назад

ELSA-2021-0656: firefox security update (CRITICAL)

EPSS: Низкий
oracle-oval логотип

ELSA-2021-0655

почти 5 лет назад

ELSA-2021-0655: firefox security update (CRITICAL)

EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
ubuntu логотип
CVE-2021-23969

As specified in the W3C Content Security Policy draft, when creating a violation report, "User agents need to ensure that the source file is the URL requested by the page, pre-redirects. If that’s not possible, user agents need to strip the URL down to an origin to avoid unintentional leakage." Under certain types of redirects, Firefox incorrectly set the source file to be the destination of the redirects. This was fixed to be the redirect destination's origin. This vulnerability affects Firefox < 86, Thunderbird < 78.8, and Firefox ESR < 78.8.

CVSS3: 4.3
1%
Низкий
почти 5 лет назад
redhat логотип
CVE-2021-23969

As specified in the W3C Content Security Policy draft, when creating a violation report, "User agents need to ensure that the source file is the URL requested by the page, pre-redirects. If that’s not possible, user agents need to strip the URL down to an origin to avoid unintentional leakage." Under certain types of redirects, Firefox incorrectly set the source file to be the destination of the redirects. This was fixed to be the redirect destination's origin. This vulnerability affects Firefox < 86, Thunderbird < 78.8, and Firefox ESR < 78.8.

CVSS3: 4.3
1%
Низкий
почти 5 лет назад
nvd логотип
CVE-2021-23969

As specified in the W3C Content Security Policy draft, when creating a violation report, "User agents need to ensure that the source file is the URL requested by the page, pre-redirects. If that’s not possible, user agents need to strip the URL down to an origin to avoid unintentional leakage." Under certain types of redirects, Firefox incorrectly set the source file to be the destination of the redirects. This was fixed to be the redirect destination's origin. This vulnerability affects Firefox < 86, Thunderbird < 78.8, and Firefox ESR < 78.8.

CVSS3: 4.3
1%
Низкий
почти 5 лет назад
debian логотип
CVE-2021-23969

As specified in the W3C Content Security Policy draft, when creating a ...

CVSS3: 4.3
1%
Низкий
почти 5 лет назад
github логотип
GHSA-hrpc-c9c2-pj6w

As specified in the W3C Content Security Policy draft, when creating a violation report, "User agents need to ensure that the source file is the URL requested by the page, pre-redirects. If that’s not possible, user agents need to strip the URL down to an origin to avoid unintentional leakage." Under certain types of redirects, Firefox incorrectly set the source file to be the destination of the redirects. This was fixed to be the redirect destination's origin. This vulnerability affects Firefox < 86, Thunderbird < 78.8, and Firefox ESR < 78.8.

CVSS3: 4.3
1%
Низкий
больше 3 лет назад
suse-cvrf логотип
openSUSE-SU-2021:0387-1

Security update for MozillaThunderbird

почти 5 лет назад
suse-cvrf логотип
openSUSE-SU-2021:0373-1

Security update for MozillaFirefox

почти 5 лет назад
suse-cvrf логотип
SUSE-SU-2021:14657-1

Security update for MozillaFirefox

почти 5 лет назад
suse-cvrf логотип
SUSE-SU-2021:0676-1

Security update for MozillaFirefox

почти 5 лет назад
suse-cvrf логотип
SUSE-SU-2021:0667-1

Security update for MozillaFirefox

почти 5 лет назад
suse-cvrf логотип
SUSE-SU-2021:0661-1

Security update for MozillaThunderbird

почти 5 лет назад
suse-cvrf логотип
SUSE-SU-2021:0659-1

Security update for MozillaFirefox

почти 5 лет назад
oracle-oval логотип
ELSA-2021-0661

ELSA-2021-0661: thunderbird security update (IMPORTANT)

почти 5 лет назад
oracle-oval логотип
ELSA-2021-0657

ELSA-2021-0657: thunderbird security update (IMPORTANT)

почти 5 лет назад
oracle-oval логотип
ELSA-2021-0656

ELSA-2021-0656: firefox security update (CRITICAL)

почти 5 лет назад
oracle-oval логотип
ELSA-2021-0655

ELSA-2021-0655: firefox security update (CRITICAL)

почти 5 лет назад

Уязвимостей на страницу