Command Injection

🗓️ 05 Nov 2021 03:36:28Reported by Veracode Vulnerability DatabaseType

veracode

veracode🔗 sca.analysiscenter.veracode.com👁 19 Views

firefox command injection vulnerabilit

Reporter	Title	Published	Views	Family All 73
ALT Linux	Security fix for the ALT Linux 10 package firefox-esr version 91.3.0-alt1	9 Nov 202100:00	–	altlinux
ALT Linux	Security fix for the ALT Linux 10 package thunderbird version 91.3.0-alt1	10 Nov 202100:00	–	altlinux
AlpineLinux	CVE-2021-38510	8 Dec 202121:21	–	alpinelinux
CNNVD	Mozilla Firefox 命令注入漏洞	2 Nov 202100:00	–	cnnvd
CNVD	Mozilla Firefox command injection vulnerability	4 Nov 202100:00	–	cnvd
CVE	CVE-2021-38510	8 Dec 202121:21	–	cve
Cvelist	CVE-2021-38510	8 Dec 202121:21	–	cvelist
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities of Mozilla Firefox (less than Firefox 91.8.0ESR) have affected Synthetic Playback Agent 8.1.4.0-8.1.4 IF16 - 2022.4.0	29 Apr 202204:43	–	ibm
Debian CVE	CVE-2021-38510	8 Dec 202121:21	–	debiancve
EUVD	EUVD-2021-24962	7 Oct 202500:30	–	euvd

Vulners

Node

firefox-esr firefox-esrMatch68.5.0-r1os

AND

firefox-esr firefox-esrMatch78.8.0-r1os

AND

firefox-esr firefox-esrMatch78.13.0-r0os

AND

firefox-esr firefox-esrMatch68.7.0-r2os

AND

firefox-esr firefox-esrMatch78.10.0-r0os

AND

firefox-esr firefox-esrMatch78.12.0-r0os

AND

firefox-esr firefox-esrMatch68.6.0-r0os

AND

firefox-esr firefox-esrMatch78.9.0-r0os

AND

firefox-esr firefox-esrMatch68.6.1-r0os

AND

firefox-esr firefox-esrMatch68.8.0-r0os

AND

firefox-esr firefox-esrMatch91.2.0-r1os

AND

firefox-esr firefox-esrMatch78.8.0-r0os

AND

firefox-esr firefox-esrMatch78.11.0-r0os

AND

firefox-esr firefox-esrMatch68.7.0-r1os

AND

alpinelinux alpine_linuxMatchedge

OR

mozilla firefoxMatch87.0-r0os

AND

mozilla firefoxMatch75.0-r1os

AND

mozilla firefoxMatch89.0.1-r1os

AND

mozilla firefoxMatch85.0.2-r0os

AND

mozilla firefoxMatch93.0-r1os

AND

mozilla firefoxMatch88.0-r0os

AND

mozilla firefoxMatch76.0.1-r1os

AND

mozilla firefoxMatch74.0.1-r0os

AND

mozilla firefoxMatch89.0.2-r0os

AND

mozilla firefoxMatch89.0.1-r0os

AND

mozilla firefoxMatch90.0-r0os

AND

mozilla firefoxMatch73.0.1-r1os

AND

mozilla firefoxMatch85.0.2-r1os

AND

mozilla firefoxMatch76.0-r0os

AND

mozilla firefoxMatch75.0-r2os

AND

mozilla firefoxMatch76.0.1-r0os

AND

mozilla firefoxMatch88.0.1-r0os

AND

mozilla firefoxMatch89.0-r0os

AND

mozilla firefoxMatch90.0.2-r0os

AND

mozilla firefoxMatch74.0-r1os

AND

alpinelinux alpine_linuxMatchedge

OR

mozilla firefoxMatch93.0-r1os

AND

alpinelinux alpine_linuxMatch3.15

OR

firefox-esr firefox-esrMatch91.2.0-r1os

AND

alpinelinux alpine_linuxMatch3.15

OR

mozilla thunderbirdMatch68.6.0-r0os

AND

mozilla thunderbirdMatch78.7.0-r0os

AND

mozilla thunderbirdMatch78.9.0-r2os

AND

mozilla thunderbirdMatch78.9.0-r1os

AND

mozilla thunderbirdMatch78.9.0-r0os

AND

mozilla thunderbirdMatch68.5.0-r1os

AND

mozilla thunderbirdMatch68.8.1-r0os

AND

mozilla thunderbirdMatch68.7.0-r0os

AND

mozilla thunderbirdMatch78.9.0-r3os

AND

mozilla thunderbirdMatch68.8.0-r0os

AND

mozilla thunderbirdMatch68.7.0-r1os

AND

mozilla thunderbirdMatch68.6.0-r2os

AND

alpinelinux alpine_linuxMatchedge

Source	Link
secdb	www.secdb.alpinelinux.org/edge/community.yaml
bugzilla	www.bugzilla.mozilla.org/show_bug.cgi
mozilla	www.mozilla.org/security/advisories/mfsa2021-48/
mozilla	www.mozilla.org/security/advisories/mfsa2021-49/
mozilla	www.mozilla.org/security/advisories/mfsa2021-50/

13 Jul 2022 12:50Current

3.1Low risk

Vulners AI Score3.1

CVSS 26.8

CVSS 3.18.8

EPSS0.00417

firefox command injection vulnerability executable file warning .inetloc files malicious code system