CVE-2021-23968

🗓️ 26 Feb 2021 01:59:36Reported by mozillaType

cve🔗 web.nvd.nist.gov📰️ 3 Media mentions👁 366 Views

If Content Security Policy blocked frame navigation, the full destination of a redirect served in the frame was reported in the violation report; as opposed to the original frame URI. This could be used to leak sensitive information contained in such URIs

Reporter	Title	Published	Views	Family All 172
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in Mozilla Firefox affect IBM Cloud Pak for Multicloud Management Monitoring	18 May 202111:41	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities of Mozilla Firefox (less than Firefox 78.9.0 ESR + CVE-2021-23978) have affected Synthetic Playback Agent 8.1.4.0-8.1.4 IF13 + CP4MCM2.2	12 May 202102:37	–	ibm
ALT Linux	Security fix for the ALT Linux 10 package thunderbird version 78.8.0-alt1	25 Feb 202100:00	–	altlinux
ALT Linux	Security fix for the ALT Linux 10 package firefox-esr version 78.8.0-alt1	23 Feb 202100:00	–	altlinux
Tenable Nessus	Amazon Linux 2 : thunderbird (ALAS-2021-1618)	19 Mar 202100:00	–	nessus
Tenable Nessus	CentOS 8 : firefox (CESA-2021:0655)	27 Feb 202100:00	–	nessus
Tenable Nessus	CentOS 8 : thunderbird (CESA-2021:0657)	27 Feb 202100:00	–	nessus
Tenable Nessus	CentOS 7 : firefox (RHSA-2021:0656)	27 Feb 202100:00	–	nessus
Tenable Nessus	CentOS 7 : thunderbird (RHSA-2021:0661)	27 Feb 202100:00	–	nessus
Tenable Nessus	Debian DLA-2575-1 : firefox-esr security update	1 Mar 202100:00	–	nessus

NVD

Vulners

Node

mozilla firefoxRange<86.0

mozilla firefox_esrRange<78.8

mozilla thunderbirdRange<78.8

Node

debian debian_linuxMatch9.0

debian debian_linuxMatch10.0

[
  {
    "product": "Firefox",
    "vendor": "Mozilla",
    "versions": [
      {
        "status": "affected",
        "version": "< 86"
      }
    ]
  },
  {
    "product": "Thunderbird",
    "vendor": "Mozilla",
    "versions": [
      {
        "status": "affected",
        "version": "< 78.8"
      }
    ]
  },
  {
    "product": "Firefox ESR",
    "vendor": "Mozilla",
    "versions": [
      {
        "status": "affected",
        "version": "< 78.8"
      }
    ]
  }
]

Source	Link
debian	www.debian.org/security/2021/dsa-4866
mozilla	www.mozilla.org/security/advisories/mfsa2021-08/
mozilla	www.mozilla.org/security/advisories/mfsa2021-07/
bugzilla	www.bugzilla.mozilla.org/show_bug.cgi
security	www.security.gentoo.org/glsa/202104-09
lists	www.lists.debian.org/debian-lts-announce/2021/03/msg00000.html
security	www.security.gentoo.org/glsa/202104-10
mozilla	www.mozilla.org/security/advisories/mfsa2021-09/

17 Jun 2026 03:39Current

5.4Medium risk

Vulners AI Score5.4

CVSS 3.14.3

CVSS 24.3

EPSS0.01222

CWE-209