CVE-2021-29953

2021-06-2400:00:00

ubuntu.com

0.001 Low

EPSS

Percentile

35.6%

JSON

A malicious webpage could have forced a Firefox for Android user into
executing attacker-controlled JavaScript in the context of another domain,
resulting in a Universal Cross-Site Scripting vulnerability. Note: This
issue only affected Firefox for Android. Other operating systems are
unaffected. Further details are being temporarily withheld to allow users
an opportunity to update.. This vulnerability affects Firefox < 88.0.1 and
Firefox for Android < 88.1.3.

Notes

Author	Note
tyhicks	mozjs contains a copy of the SpiderMonkey JavaScript engine
alexmurray	As per the upstream advisory, this issue only affected Firefox for Android and so firefox on ubuntu is unaffected.