CVE-2021-29953
Description
A malicious webpage could have forced a Firefox for Android user into executing attacker-controlled JavaScript in the context of another domain, resulting in a Universal Cross-Site Scripting vulnerability. *Note: This issue only affected Firefox for Android. Other operating systems are unaffected. Further details are being temporarily withheld to allow users an opportunity to update.*. This vulnerability affects Firefox < 88.0.1 and Firefox for Android < 88.1.3.
Risk Information
Base Score
6.1
MODERATE
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
EPSS Score
Exploitation Probability
0.392
Associated Vulnerability
| Vulnerability | OS Platform |
|---|---|
| Vulnerabilities CVE-2021-29953,CVE-2021-29952 are fixed in Mozilla Firefox (88.0.1) | Windows |
| Vulnerabilities CVE-2021-29953,CVE-2021-29952 are fixed in Mozilla Firefox (x64) (88.0.1) | Windows |
| Vulnerabilities CVE-2021-29953,CVE-2021-29952 are fixed in Update for Glary Utilities (5.88.0.109) | Windows |
| Vulnerabilities CVE-2021-29953,CVE-2021-29952 are fixed in Mozilla Firefox For Mac (88.0.1) | Mac |
| Vulnerabilities CVE-2021-29953,CVE-2021-29952 are fixed in Mozilla Firefox For Mac 88.1.3 | Mac |
| Vulnerabilities CVE-2021-29953 are affected in Mozilla Firefox for Mac 88.0.0 | Mac |
| Vulnerabilities CVE-2021-29953 are affected in Mozilla Firefox for Mac 88.1.2 | Mac |
Patch Details
Click to see the patches provided by ManageEngine for this CVE
| Patch ID | Patch Description |
|---|---|
| PATCH-319454 | Mozilla Firefox (88.0.1) |
| PATCH-319455 | Mozilla Firefox (x64) (88.0.1) |
| PATCH-306710 | Update for Glary Utilities (5.88.0.109) |
| PATCH-607000 | Mozilla Firefox For Mac (124.0) |
| PATCH-611870 | Mozilla Firefox For Mac (142.0.1) |
| PATCH-611870 | Mozilla Firefox For Mac (142.0.1) |
| PATCH-611870 | Mozilla Firefox For Mac (142.0.1) |
References
https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234