PT-2021-7311 · Mozilla+4 · Firefox+4
Sebastian Hengst
·
Published
2021-06-01
·
Updated
2024-12-12
·
CVE-2021-29960
CVSS v3.1
4.3
Medium
| Vector | AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N |
Name of the Vulnerable Software and Affected Versions
Firefox versions prior to 89
Description
The issue is related to the lack of proper validation of incoming requests, which could allow a remote attacker to access and compromise confidential data. Additionally, there's a concern with how Firefox handles filename caching for printing, potentially leading to the storage of website titles visited during private browsing mode on disk.
Recommendations
For versions prior to 89, update to version 89 or later to resolve the issue. As a temporary workaround, consider restricting the use of the printing feature until a patch is applied. Avoid using the private browsing mode for sensitive activities until the issue is resolved.
Exploit
Fix
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Alt Linux
Astra Linux
Firefox
Linuxmint
Ubuntu