Under certain circumstances, asynchronous functions could have caused a navigation to fail but expose the target URL. This vulnerability affects Thunderbird < 91.4.0, Firefox ESR < 91.4.0, and Firefox < 95.

Available Exploits

No exploits available for this CVE.

Related News

No news articles found for this CVE.

Affected Products

Mozilla

Thunderbird

Affected Versions:

unspecified

Mozilla

Firefox ESR

Affected Versions:

unspecified

Mozilla

Firefox

Affected Versions:

unspecified

References

https://www.mozilla.org/security/advisories/mfsa2021-53/

https://www.mozilla.org/security/advisories/mfsa2021-54/

https://www.mozilla.org/security/advisories/mfsa2021-52/

https://bugzilla.mozilla.org/show_bug.cgi?id=1730120

https://www.debian.org/security/2021/dsa-5026

https://lists.debian.org/debian-lts-announce/2021/12/msg00030.html

https://www.debian.org/security/2022/dsa-5034

https://lists.debian.org/debian-lts-announce/2022/01/msg00001.html

https://security.gentoo.org/glsa/202202-03

https://security.gentoo.org/glsa/202208-14

Published: 2021-12-08T21:20:30

Last Modified: 2024-08-04T03:55:29.308Z

Copied to clipboard!