CVE-2021-43533

2021-12-0821:20:47

mozilla

www.cve.org

6.2 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

32.6%

JSON

When parsing internationalized domain names, high bits of the characters in the URLs were sometimes stripped, resulting in inconsistencies that could lead to user confusion or attacks such as phishing. This vulnerability affects Firefox < 94.

CNA Affected

[
  {
    "product": "Firefox",
    "vendor": "Mozilla",
    "versions": [
      {
        "lessThan": "94",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  }
]