PT-2021-7411

🗓️ 02 Nov 2021 00:00:00Reported by Positive TechnologiesType

Web Extensions could leak pre-redirect URL data due to a same-origin issue; update Firefox 94+.

Reporter	Title	Published	Views	Family All 1000
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities of Mozilla Firefox (less than Firefox 78.14.0 ESR +CVE-2021-38493) have affected Synthetic Playback Agent 8.1.4.0-8.1.4 IF14	15 Dec 202113:44	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in Mozilla Firefox affect IBM Cloud Pak for Multicloud Management Monitoring	18 May 202111:41	–	ibm
IBM Security Bulletins	Security Bulletin: Due to use of Mozilla Firefox, IBM Cloud Pak for Multicloud Management Monitoring is vulnerable to multiple vulnerabilities.	31 Aug 202311:04	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities of Mozilla Firefox (less than Firefox 78.9.0 ESR + CVE-2020-26974) have affected Synthetic Playback Agent 8.1.4.0-8.1.4 IF13 + CP4MCM2.2	12 May 202102:48	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in Mozilla Firefox affect IBM Cloud Pak for Multicloud Management Monitoring.	31 Jan 202314:47	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities of Mozilla Firefox (less than Firefox 102.2ESR) have affected Synthetic Playback Agent 8.1.4.0-8.1.4 IF16 - 2022.4.0	15 Nov 202205:24	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities of Mozilla Firefox (less than Firefox 91.8.0ESR) have affected Synthetic Playback Agent 8.1.4.0-8.1.4 IF16 - 2022.4.0	29 Apr 202204:43	–	ibm
ALT Linux	Security fix for the ALT Linux 10 package thunderbird version 91.10.0-alt1	3 Jun 202200:00	–	altlinux
ALT Linux	Security fix for the ALT Linux 10 package firefox-esr version 91.3.0-alt1	9 Nov 202100:00	–	altlinux
ALT Linux	Security fix for the ALT Linux 10 package firefox-esr version 91.11.0-alt1	29 Jun 202200:00	–	altlinux

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2021-23994
nvd	www.nvd.nist.gov/vuln/detail/CVE-2022-22740
openeuler	www.openeuler.org/en/security/safety-bulletin/detail.html
nvd	www.nvd.nist.gov/vuln/detail/CVE-2022-31738
nvd	www.nvd.nist.gov/vuln/detail/CVE-2020-26956
nvd	www.nvd.nist.gov/vuln/detail/CVE-2022-24713
nvd	www.nvd.nist.gov/vuln/detail/CVE-2022-31736
nvd	www.nvd.nist.gov/vuln/detail/CVE-2023-1945
nvd	www.nvd.nist.gov/vuln/detail/CVE-2022-31742
nvd	www.nvd.nist.gov/vuln/detail/CVE-2021-23970

22 Sep 2023 00:00Current

6.7Medium risk

Vulners AI Score6.7

CVSS 25 - 9.3

CVSS 3.19.6 - 9.8

EPSS0.02351

SSVC