Lucene search

K
cvelistMozillaCVELIST:CVE-2021-23968
HistoryFeb 26, 2021 - 1:59 a.m.

CVE-2021-23968

2021-02-2601:59:36
mozilla
raw.githubusercontent.com
1

5 Medium

AI Score

Confidence

Low

0.011 Low

EPSS

Percentile

84.2%

If Content Security Policy blocked frame navigation, the full destination of a redirect served in the frame was reported in the violation report; as opposed to the original frame URI. This could be used to leak sensitive information contained in such URIs. This vulnerability affects Firefox < 86, Thunderbird < 78.8, and Firefox ESR < 78.8.