The vulnerability in Firefox ESR and Firefox web browsers relates to the insufficient elimination of certain elements in the request, allowing an attacker to access confidential data.

🗓️ 13 Sep 2024 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

bdu_fstec

bdu_fstec🔗 bdu.fstec.ru👁 1 Views

Vulnerability in Firefox Extended Support Release and Firefox browser due to improper removal of request elements, exposing data.

Reporter	Title	Published	Views	Family All 37
AstraLinux	Astra Linux - уязвимость в firefox	20 May 202605:53	–	astralinux
CNNVD	Mozilla Firefox 注入漏洞	24 Jun 202100:00	–	cnnvd
CVE	CVE-2021-29955	24 Jun 202113:17	–	cve
Cvelist	CVE-2021-29955	24 Jun 202113:17	–	cvelist
Debian CVE	CVE-2021-29955	24 Jun 202113:17	–	debiancve
EUVD	EUVD-2021-16414	7 Oct 202500:30	–	euvd
Kaspersky	KLA12127 Multiple vulnerabilities in Mozilla Firefox	23 Mar 202100:00	–	kaspersky
Kaspersky	KLA12128 Multiple vulnerabilities in Mozilla Firefox ESR	23 Mar 202100:00	–	kaspersky
Tenable Nessus	Mozilla Firefox ESR < 78.9	23 Mar 202100:00	–	nessus
Tenable Nessus	Mozilla Firefox < 87.0	23 Mar 202100:00	–	nessus

Vulners

Node

mozilla firefox_esrRange<78.9

OR

mozilla firefoxRange<87

Source	Link
bugzilla	www.bugzilla.mozilla.org/show_bug.cgi
nvd	www.nvd.nist.gov/vuln/detail/CVE-2021-29955
security-tracker	www.security-tracker.debian.org/tracker/CVE-2021-29955
wiki	www.wiki.astralinux.ru/astra-linux-se17-bulletin-2024-0830SE17
mozilla	www.mozilla.org/en-US/security/advisories/mfsa2021-10/
mozilla	www.mozilla.org/en-US/security/advisories/mfsa2021-11/
mozilla	www.mozilla.org/security/advisories/mfsa2021-10/
mozilla	www.mozilla.org/security/advisories/mfsa2021-11/
wiki	www.wiki.astralinux.ru/astra-linux-se16-bulletin-20241017SE16
web	www.web.nvd.nist.gov/view/vuln/detail

07 Nov 2024 00:00Current

5.9Medium risk

Vulners AI Score5.9

CVSS 22.6

CVSS 35.3

EPSS0.00884

Firefox Extended Support Release Firefox browser request elements confidential data remote attackers