Lucene search

CVE-2021-43543

🗓️ 08 Dec 2021 21:38:19Reported by mozillaType

Documents loaded with CSP could escape sandbox restriction

Reporter	Title	Published	Views	Family All 155
Veracode	Remote Code Execution (RCE)	10 Dec 202107:38	–	veracode
Prion	Code injection	8 Dec 202122:15	–	prion
AlpineLinux	CVE-2021-43543	8 Dec 202122:15	–	alpinelinux
CVE	CVE-2021-43543	8 Dec 202122:15	–	cve
NVD	CVE-2021-43543	8 Dec 202122:15	–	nvd
UbuntuCve	CVE-2021-43543	8 Dec 202100:00	–	ubuntucve
RedhatCVE	CVE-2021-43543	8 Dec 202102:50	–	redhatcve
Debian CVE	CVE-2021-43543	8 Dec 202122:15	–	debiancve
CNVD	Mozilla Firefox Cross-Site Scripting Vulnerability (CNVD-2021-99615)	13 Dec 202100:00	–	cnvd
SUSE Linux	Security update for MozillaFirefox (important)	10 Dec 202100:00	–	suse

[
  {
    "product": "Thunderbird",
    "vendor": "Mozilla",
    "versions": [
      {
        "lessThan": "91.4.0",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  },
  {
    "product": "Firefox ESR",
    "vendor": "Mozilla",
    "versions": [
      {
        "lessThan": "91.4.0",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  },
  {
    "product": "Firefox",
    "vendor": "Mozilla",
    "versions": [
      {
        "lessThan": "95",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
lists	www.lists.debian.org/debian-lts-announce/2021/12/msg00030.html
lists	www.lists.debian.org/debian-lts-announce/2022/01/msg00001.html
security	www.security.gentoo.org/glsa/202208-14
bugzilla	www.bugzilla.mozilla.org/show_bug.cgi
mozilla	www.mozilla.org/security/advisories/mfsa2021-52/
mozilla	www.mozilla.org/security/advisories/mfsa2021-53/
mozilla	www.mozilla.org/security/advisories/mfsa2021-54/
debian	www.debian.org/security/2021/dsa-5026
security	www.security.gentoo.org/glsa/202202-03
debian	www.debian.org/security/2022/dsa-5034

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

08 Dec 2021 21:19Current

7.5High risk

Vulners AI Score7.5

EPSS0.008