CVE-2021-29971

2021-08-0519:46:31

mozilla

www.cve.org

9.1 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

58.7%

JSON

If a user had granted a permission to a webpage and saved that grant, any webpage running on the same host - irrespective of scheme or port - would be granted that permission. This bug only affects Firefox for Android. Other operating systems are unaffected.. This vulnerability affects Firefox < 90.

CNA Affected

[
  {
    "product": "Firefox",
    "vendor": "Mozilla",
    "versions": [
      {
        "lessThan": "90",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  }
]