PT-2021-3711 · Mozilla+4 · Firefox+4
Irvan Kurniawan
·
Published
2021-07-13
·
Updated
2024-12-12
·
CVE-2021-29975
CVSS v3.1
6.5
Medium
| Vector | AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N |
Name of the Vulnerable Software and Affected Versions
Firefox versions prior to 90
Description
The issue is related to errors in the representation of information in the Document Object Model (DOM). It allows an attacker to overlay a message, which they control the text of, on top of another domain, potentially causing user confusion. The attacker does not have control over the HTML or formatting of the message. This could enable spoofing attacks.
Recommendations
For versions prior to 90, update to version 90 or later to resolve the issue.
Exploit
Fix
UI Misrepresentation of Critical Information
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Alt Linux
Astra Linux
Firefox
Linuxmint
Ubuntu