CVE-2021-43544
N/A
N/A
Summary
When receiving a URL through a SEND intent, Firefox would have searched for the text, but subsequent usages of the address bar might have caused the URL to load unintentionally, which could lead to XSS and spoofing attacks. This bug only affects Firefox for Android. Other operating systems are unaffected.. This vulnerability affects Firefox < 95.
Affected Software
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| Mozilla | Firefox | unspecified < 95 | affected |
Weaknesses
- Receiving a malicious URL as text through a SEND intent could have led to XSS
ADP Enrichment
CVE Program Container
Additional References
- https://www.mozilla.org/security/advisories/mfsa2021-52/
- https://bugzilla.mozilla.org/show_bug.cgi?id=1739934
References
- https://www.mozilla.org/security/advisories/mfsa2021-52/
- https://bugzilla.mozilla.org/show_bug.cgi?id=1739934
Feedback
Was this page helpful?
Glad to hear it! Please tell us how we can improve.
Sorry to hear that. Please tell us how we can improve.