Mozilla · Firefox · CVE-2021-23972
Name of the Vulnerable Software and Affected Versions:
Firefox versions prior to 86
Description:
A phishing tactic involves providing a link with HTTP Auth, such as 'https://www.phishingtarget.com@evil.com'. Firefox displays a warning dialog to mitigate this attack. However, if the malicious site uses a redirect cached by the browser, the warning dialog may not be displayed.
Recommendations:
For versions prior to 86, update to a version 86 or later to resolve the issue. As a temporary workaround, consider clearing the browser cache to minimize the risk of exploitation. Restrict access to potentially malicious sites to minimize the risk of phishing attacks.