PT-2021-23860

🗓️ 02 Nov 2021 00:00:00Reported by Positive TechnologiesType

Firefox before 94 may leak tokens via copied image links; update to 94+ and avoid Copy Image Link.

Reporter	Title	Published	Views	Family All 1000
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in Mozilla Firefox affect IBM Cloud Pak for Multicloud Management Monitoring	18 May 202111:41	–	ibm
IBM Security Bulletins	Security Bulletin: Due to use of Mozilla Firefox, IBM Cloud Pak for Multicloud Management Monitoring is vulnerable to multiple vulnerabilities.	31 Aug 202311:04	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in Mozilla Firefox affect IBM Cloud Pak for Multicloud Management Monitoring.	31 Jan 202314:47	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities of Mozilla Firefox (less than Firefox 78.9.0 ESR + CVE-2021-23978) have affected Synthetic Playback Agent 8.1.4.0-8.1.4 IF13 + CP4MCM2.2	12 May 202102:37	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities of Mozilla Firefox (less than Firefox 91.8.0ESR) have affected Synthetic Playback Agent 8.1.4.0-8.1.4 IF16 - 2022.4.0	29 Apr 202204:43	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities of Mozilla Firefox (less than Firefox 102.6ESR) have affected Synthetic Playback Agent 8.1.4.0-8.1.4 IF16	15 Feb 202310:00	–	ibm
ALT Linux	Security fix for the ALT Linux 10 package thunderbird version 78.8.0-alt1	25 Feb 202100:00	–	altlinux
ALT Linux	Security fix for the ALT Linux 10 package thunderbird version 91.8.0-alt1	6 Apr 202200:00	–	altlinux
ALT Linux	Security fix for the ALT Linux 10 package firefox-esr version 91.6.0-alt1	16 Feb 202200:00	–	altlinux
ALT Linux	Security fix for the ALT Linux 10 package firefox-esr version 78.8.0-alt1	23 Feb 202100:00	–	altlinux

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2021-23994
nvd	www.nvd.nist.gov/vuln/detail/CVE-2022-22740
nvd	www.nvd.nist.gov/vuln/detail/CVE-2022-40956
openeuler	www.openeuler.org/en/security/safety-bulletin/detail.html
nvd	www.nvd.nist.gov/vuln/detail/CVE-2021-29946
nvd	www.nvd.nist.gov/vuln/detail/CVE-2022-40958
nvd	www.nvd.nist.gov/vuln/detail/CVE-2020-26956
nvd	www.nvd.nist.gov/vuln/detail/CVE-2022-31738
nvd	www.nvd.nist.gov/vuln/detail/CVE-2022-22739
nvd	www.nvd.nist.gov/vuln/detail/CVE-2021-43535

22 Sep 2023 00:00Current

6.9Medium risk

Vulners AI Score6.9

CVSS 3.16.1 - 9.6

CVSS 26.8

EPSS0.01477

SSVC