PT-2021-2991 · Mozilla+4 · Firefox+4

Andrew Mccreight · Published 2021-04-19 · Updated 2026-01-06 · CVE-2021-24001

Positive Technologies (AI Summary)

CVSS v2.0

6.4

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:N

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 88

Description The issue is related to errors in restricting security on testing infrastructure, which could allow a remote attacker to gain unauthorized access to protected information. A compromised content process could perform session history manipulations that it should not have been able to due to the testing infrastructure not being restricted to testing-only configurations.

Recommendations For versions prior to 88, update to version 88 or later to resolve the issue.

Fix

Exposure of Resource to Wrong Sphere

Weakness Enumeration

CWE-668

CWE-264

Related Identifiers

ALT-PU-2021-1676

ALT-PU-2021-2725

ALT-PU-2021-2881

ALT-PU-2021-3368

ALT-PU-2021-3369

ALT-PU-2022-1781

ALT-PU-2022-1782

BDU:2021-02581

CVE-2021-24001

OESA-2023-1673

OESA-2023-1674

OPENSUSE-SU-2024:10600-1

OPENSUSE-SU-2024:14572-1

USN-4926-1

Affected Products

Alt Linux

Astra Linux

Firefox

Linuxmint

Ubuntu

References · 2185

• https://nvd.nist.gov/vuln/detail/CVE-2022-1529 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2023-25730 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2023-23603 · Security Note
• https://ubuntu.com/security/CVE-2021-23995 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-28162 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2022-38477 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2020-26978 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2022-22757 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2023-4049 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2022-22745 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2023-0767 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2020-15673 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2022-28284 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2022-1097 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2023-37202 · Security Note