vulnerability
MFSA2021-49 Firefox: Security Vulnerabilities fixed in Firefox ESR 91.3 (CVE-2021-38508)
| Severity | CVSS | Published | Added | Modified |
|---|---|---|---|---|
| 4 | (AV:N/AC:M/Au:N/C:N/I:P/A:N) | 11/02/2021 | 11/03/2021 | 11/26/2024 |
Severity
4
CVSS
(AV:N/AC:M/Au:N/C:N/I:P/A:N)
Published
11/02/2021
Added
11/03/2021
Modified
11/26/2024
Description
By displaying a form validity message in the correct location at the same time as a permission prompt (such as for geolocation), the validity message could have obscured the prompt, resulting in the user potentially being tricked into granting the permission. This vulnerability affects Firefox
Solution
mozilla-firefox-esr-upgrade-91_3
NEW
Explore Exposure Command
Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.