CVE-2021-23972

🗓️ 26 Feb 2021 01:54:22Reported by mozillaType

cve🔗 web.nvd.nist.gov📰️ 3 Media mentions👁 321 Views

One phishing tactic on the web is to provide a link with HTTP Auth. For example 'https://[email protected]'. To mitigate this type of attack, Firefox will display a warning dialog; however, this warning dialog would not have been displayed if evil.com used a redirect that was cached by the browser. This vulnerability affects Firefox < 86

Reporter	Title	Published	Views	Family All 38
AlpineLinux	CVE-2021-23972	26 Feb 202101:54	–	alpinelinux
AstraLinux	Astra Linux - уязвимость в firefox	20 May 202605:53	–	astralinux
Circl	CVE-2021-23972	26 Feb 202107:38	–	circl
CNNVD	Mozilla Firefox 安全漏洞	23 Feb 202100:00	–	cnnvd
CNVD	Unspecified Vulnerability in Mozilla Firefox (CNVD-2021-15354)	5 Mar 202100:00	–	cnvd
Cvelist	CVE-2021-23972	26 Feb 202101:54	–	cvelist
Debian CVE	CVE-2021-23972	26 Feb 202101:54	–	debiancve
EUVD	EUVD-2021-10893	7 Oct 202500:30	–	euvd
Tenable Nessus	GLSA-202104-10 : Mozilla Firefox: Multiple vulnerabilities	3 May 202100:00	–	nessus
Tenable Nessus	Mozilla Firefox < 86.0	23 Feb 202100:00	–	nessus

NVD

Vulners

Node

mozilla firefoxRange<86.0

[
  {
    "product": "Firefox",
    "vendor": "Mozilla",
    "versions": [
      {
        "status": "affected",
        "version": "< 86"
      }
    ]
  }
]

Source	Link
security	www.security.gentoo.org/glsa/202104-10
mozilla	www.mozilla.org/security/advisories/mfsa2021-07/
bugzilla	www.bugzilla.mozilla.org/show_bug.cgi

21 Nov 2024 05:52Current

7.9High risk

Vulners AI Score7.9

CVSS 26.8

CVSS 3.18.8

EPSS0.00407