Lucene search
Veracode Vulnerability DatabaseVERACODE:33250HistoryDec 12, 2021 - 6:18 a.m.
Cross-site Scripting (XSS)
2021-12-1206:18:12
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
13
firefox
edge
cross-site scripting
url
spoofing attacks
android
EPSS
0.001
Percentile
36.7%
firefox:edge is vulnerable to cross-site scripting. When receiving a URL through a SEND intent, Firefox would have searched for the text, but subsequent usages of the address bar might have caused the URL to load unintentionally, which could lead to XSS and spoofing attacks. This bug only affects Firefox for Android. Other operating systems are unaffected..
Affected configurations
Node
-firefox\Matchedge89.0.1-r1
OR-firefox\Matchedge94.0.2-r0
OR-firefox\Matchedge90.0.2-r0
OR-firefox\Matchedge74.0.1-r0
OR-firefox\Matchedge74.0-r1
OR-firefox\Matchedge76.0.1-r0
OR-firefox\Matchedge88.0-r0
OR-firefox\Matchedge73.0.1-r1
OR-firefox\Matchedge94.0-r0
OR-firefox\Matchedge89.0-r0
OR-firefox\Matchedge75.0-r1
OR-firefox\Matchedge76.0-r0
OR-firefox\Matchedge87.0-r0
OR-firefox\Matchedge93.0-r1
OR-firefox\Matchedge90.0-r0
OR-firefox\Matchedge88.0.1-r0
OR-firefox\Matchedge76.0.1-r1
OR-firefox\Matchedge85.0.2-r1
OR-firefox\Matchedge89.0.1-r0
OR-firefox\Matchedge89.0.2-r0
OR-firefox\Matchedge75.0-r2
OR-firefox\Matchedge85.0.2-r0
OR-firefox\Matchedge89.0.1-r1
OR-firefox\Matchedge94.0.2-r0
OR-firefox\Matchedge90.0.2-r0
OR-firefox\Matchedge74.0.1-r0
OR-firefox\Matchedge74.0-r1
OR-firefox\Matchedge76.0.1-r0
OR-firefox\Matchedge88.0-r0
OR-firefox\Matchedge73.0.1-r1
OR-firefox\Matchedge94.0-r0
OR-firefox\Matchedge89.0-r0
OR-firefox\Matchedge75.0-r1
OR-firefox\Matchedge76.0-r0
OR-firefox\Matchedge87.0-r0
OR-firefox\Matchedge93.0-r1
OR-firefox\Matchedge90.0-r0
OR-firefox\Matchedge88.0.1-r0
OR-firefox\Matchedge76.0.1-r1
OR-firefox\Matchedge85.0.2-r1
OR-firefox\Matchedge89.0.1-r0
OR-firefox\Matchedge89.0.2-r0
OR-firefox\Matchedge75.0-r2
OR-firefox\Matchedge85.0.2-r0
| Vendor | Product | Version | CPE |
|---|---|---|---|
| - | firefox\ | edge | cpe:2.3:a:-:firefox\:edge:89.0.1-r1:*:*:*:*:*:*:* |
| - | firefox\ | edge | cpe:2.3:a:-:firefox\:edge:94.0.2-r0:*:*:*:*:*:*:* |
| - | firefox\ | edge | cpe:2.3:a:-:firefox\:edge:90.0.2-r0:*:*:*:*:*:*:* |
| - | firefox\ | edge | cpe:2.3:a:-:firefox\:edge:74.0.1-r0:*:*:*:*:*:*:* |
| - | firefox\ | edge | cpe:2.3:a:-:firefox\:edge:74.0-r1:*:*:*:*:*:*:* |
| - | firefox\ | edge | cpe:2.3:a:-:firefox\:edge:76.0.1-r0:*:*:*:*:*:*:* |
| - | firefox\ | edge | cpe:2.3:a:-:firefox\:edge:88.0-r0:*:*:*:*:*:*:* |
| - | firefox\ | edge | cpe:2.3:a:-:firefox\:edge:73.0.1-r1:*:*:*:*:*:*:* |
| - | firefox\ | edge | cpe:2.3:a:-:firefox\:edge:94.0-r0:*:*:*:*:*:*:* |
| - | firefox\ | edge | cpe:2.3:a:-:firefox\:edge:89.0-r0:*:*:*:*:*:*:* |
Related
cvelist
cvelist
CVE-2021-43544
2021-12-08 21:19:31
prion
prion
Spoofing
2021-12-08 22:15:00
ubuntucve
ubuntucve
CVE-2021-43544
2021-12-08 00:00:00
cve
cve
CVE-2021-43544
2021-12-08 22:15:09
nvd
nvd
CVE-2021-43544
2021-12-08 22:15:09
alpinelinux
alpinelinux
CVE-2021-43544
2021-12-08 22:15:09
debiancve
debiancve
CVE-2021-43544
2021-12-08 22:15:09
osv
osv
MozillaFirefox-95.0-1.1 on GA media
2024-06-15 00:00:00
mozilla
mozilla
Security Vulnerabilities fixed in Firefox 95 — Mozilla
2021-12-07 00:00:00
nessus
nessus
Mozilla Firefox < 95.0
2021-12-08 00:00:00
Mozilla Firefox < 95.0
2021-12-08 00:00:00
kaspersky
kaspersky
KLA12374 Multiple vulnerabilities in Mozilla Firefox
2021-12-07 00:00:00