CVE-2021-29979

2021-08-0220:45:03

mozilla

www.cve.org

0.001 Low

EPSS

Percentile

39.0%

JSON

Hubs Cloud allows users to download shared content, specifically HTML and JS, which could allow javascript execution in the Hub Cloud instance’s primary hosting domain.*. This vulnerability affects Hubs Cloud < mozillareality/reticulum/1.0.1/20210618012634.

CNA Affected

[
  {
    "product": "Hubs Cloud",
    "vendor": "Mozilla",
    "versions": [
      {
        "lessThan": "mozillareality/reticulum/1.0.1/20210618012634",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  }
]

References

bugzilla.mozilla.org/show_bug.cgi?id=1712495

www.mozilla.org/security/advisories/mfsa2021-32/

0.001 Low

EPSS

Percentile

39.0%

JSON

Related for CVELIST:CVE-2021-29979