CVE-2021-29953

2021-06-2413:17:57

mozilla

www.cve.org

firefox

android

cross-site scripting

AI Score

5.8

Confidence

High

EPSS

0.001

Percentile

36.1%

JSON

A malicious webpage could have forced a Firefox for Android user into executing attacker-controlled JavaScript in the context of another domain, resulting in a Universal Cross-Site Scripting vulnerability. Note: This issue only affected Firefox for Android. Other operating systems are unaffected. Further details are being temporarily withheld to allow users an opportunity to update.. This vulnerability affects Firefox < 88.0.1 and Firefox for Android < 88.1.3.

CNA Affected

[
  {
    "product": "Firefox",
    "vendor": "Mozilla",
    "versions": [
      {
        "lessThan": "88.0.1",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  },
  {
    "product": "Firefox for Android",
    "vendor": "Mozilla",
    "versions": [
      {
        "lessThan": "88.1.3",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  }
]