deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2020-20392
Published: 2021-06-23
Description: SQL Injection vulnerability in imcat v5.2 via the fm[auser] parameters in coms/add_coms.php.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://github.com/peacexie/imcat/issues/5; https://github.com/peacexie/imcat/issues/5
CVE: CVE-2021-25950
Published: 2021-06-23
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none
CVE: CVE-2021-35438
Published: 2021-06-23
Description: phpIPAM 1.4.3 allows Reflected XSS via app/dashboard/widgets/ipcalc-result.php and app/tools/ip-calculator/result.php of the IP calculator.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/MarkLee131/awesome-web-pocs/blob/main/CVE-2021-35438.md; https://github.com/phpipam/phpipam/issues/3351; https://github.com/phpipam/phpipam/issues/3351
CVE: CVE-2021-33624
Published: 2021-06-23
Description: In kernel/bpf/verifier.c in the Linux kernel before 5.12.13, a branch can be mispredicted (e.g., because of type confusion) and consequently an unprivileged BPF program can read arbitrary memory locations via a side-channel attack, aka CID-9183671af6db.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-843
References: http://www.openwall.com/lists/oss-security/2021/06/21/1; https://github.com/benschlueter/CVE-2021-33624; https://github.com/torvalds/linux/commit/9183671af6dbf60a1219371d4ed73e23f43b49db
CVE: CVE-2021-3526
Published: 2021-06-23
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Notes: none
CVE: CVE-2021-29620
Published: 2021-06-23
Description: Report portal is an open source reporting and analysis framework. Starting from version 3.1.0 of the service-api XML parsing was introduced. Unfortunately the XML parser was not configured properly to prevent XML external entity (XXE) attacks. This allows a user to import a specifically-crafted XML file which imports external Document Type Definition (DTD) file with external entities for extraction of secrets from Report Portal service-api module or server-side request forgery. This will be resolved in the 5.4.0 release.
CVSS Score: 7.5 (HIGH)
CWE: CWE-611, CWE-611
References: https://github.com/reportportal/reportportal/security/advisories/GHSA-24wf-7vf2-pv59; https://github.com/reportportal/service-api/pull/1392; https://mvnrepository.com/artifact/com.epam.reportportal/service-api
CVE: CVE-2020-18657
Published: 2021-06-23
Description: Cross Site Scripting (XSS) vulnerability in GetSimpleCMS <= 3.3.15 in admin/changedata.php via the redirect_url parameter and the headers_sent function.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/GetSimpleCMS/GetSimpleCMS/issues/1310; https://github.com/LoRexxar/CVE_Request/blob/master/getsimplecms%20v3.3.15/getsimplecms_before_v3.3.15.md; https://www.seebug.org/vuldb/ssvid-97929
CVE: CVE-2020-18658
Published: 2021-06-23
Description: Cross Site Scriptiong (XSS) vulnerability in GetSimpleCMS <=3.3.15 via the timezone parameter to settings.php.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/GetSimpleCMS/GetSimpleCMS/issues/1310; https://github.com/LoRexxar/CVE_Request/blob/master/getsimplecms%20v3.3.15/getsimplecms_before_v3.3.15.md; https://www.seebug.org/vuldb/ssvid-97930
CVE: CVE-2020-18659
Published: 2021-06-23
Description: Cross Site Scripting vulnerability in GetSimpleCMS <=3.3.15 via the (1) sitename, (2) username, and (3) email parameters to /admin/setup.php
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/GetSimpleCMS/GetSimpleCMS/issues/1310; https://github.com/LoRexxar/CVE_Request/blob/master/getsimplecms%20v3.3.15/getsimplecms_before_v3.3.15.md; https://www.seebug.org/vuldb/ssvid-97931
CVE: CVE-2020-23962
Published: 2021-06-23
Description: A cross site scripting (XSS) vulnerability in Catfish CMS 4.9.90 allows attackers to execute arbitrary web scripts or HTML via a crafted payload entered into the "announcement_gonggao" parameter.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/xwlrbh/Catfish/issues/7; https://github.com/xwlrbh/Catfish/issues/7
CVE: CVE-2020-18660
Published: 2021-06-23
Description: GetSimpleCMS <=3.3.15 has an open redirect in admin/changedata.php via the redirect function to the url parameter.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-601
References: https://github.com/GetSimpleCMS/GetSimpleCMS/issues/1310; https://github.com/LoRexxar/CVE_Request/blob/master/getsimplecms%20v3.3.15/getsimplecms_before_v3.3.15.md; https://www.seebug.org/vuldb/ssvid-97928
CVE: CVE-2021-20019
Published: 2021-06-23
Description: A vulnerability in SonicOS where the HTTP server response leaks partial memory by sending a crafted HTTP request, this can potentially lead to an internal sensitive data disclosure vulnerability.
CVSS Score: 7.5 (HIGH)
CWE: CWE-200, CWE-119
References: https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2021-0006; https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2021-0006
CVE: CVE-2021-21809
Published: 2021-06-23
Description: A command execution vulnerability exists in the default legacy spellchecker plugin in Moodle 3.10. A specially crafted series of HTTP requests can lead to command execution. An attacker must have administrator privileges to exploit this vulnerabilities.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-78
References: http://packetstormsecurity.com/files/164481/Moodle-SpellChecker-Path-Authenticated-Remote-Command-Execution.html; https://talosintelligence.com/vulnerability_reports/TALOS-2021-1277; http://packetstormsecurity.com/files/164481/Moodle-SpellChecker-Path-Authenticated-Remote-Command-Execution.html
CVE: CVE-2021-34067
Published: 2021-06-23
Description: Heap based buffer overflow in tsMuxer 2.6.16 allows attackers to cause a Denial of Service (DoS) by running the application with a crafted file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-787
References: https://github.com/justdan96/tsMuxer/issues/424; https://github.com/justdan96/tsMuxer/pull/422/files; https://github.com/justdan96/tsMuxer/issues/424
CVE: CVE-2021-34068
Published: 2021-06-23
Description: Heap based buffer overflow in tsMuxer 2.6.16 allows attackers to cause a Denial of Service (DoS) by running the application with a crafted file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-787
References: https://github.com/justdan96/tsMuxer/issues/427; https://github.com/justdan96/tsMuxer/pull/425/files; https://github.com/justdan96/tsMuxer/issues/427
CVE: CVE-2021-34069
Published: 2021-06-23
Description: Divide-by-zero bug in tsMuxer 2.6.16 allows attackers to cause a Denial of Service (DoS) by running the application with a crafted file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-369
References: https://github.com/justdan96/tsMuxer/issues/428; https://github.com/justdan96/tsMuxer/pull/421/files; https://github.com/justdan96/tsMuxer/issues/428
CVE: CVE-2021-34070
Published: 2021-06-23
Description: Out-of-bounds Read in tsMuxer 2.6.16 allows attackers to cause a Denial of Service (DoS) by running the application with a crafted file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: https://github.com/justdan96/tsMuxer/issues/426; https://github.com/justdan96/tsMuxer/pull/429/files; https://github.com/justdan96/tsMuxer/issues/426
CVE: CVE-2021-34071
Published: 2021-06-23
Description: Heap based buffer overflow in tsMuxer 2.6.16 allows attackers to cause a Denial of Service (DoS) by running the application with a crafted file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-787
References: https://github.com/justdan96/tsMuxer/issues/423; https://github.com/justdan96/tsMuxer/issues/423
CVE: CVE-2021-2322
Published: 2021-06-23
Description: Vulnerability in OpenGrok (component: Web App). Versions that are affected are 1.6.7 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via HTTPS to compromise OpenGrok. Successful attacks of this vulnerability can result in takeover of OpenGrok. CVSS 3.1 Base Score 8.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H).
CVSS Score: 8.8 (HIGH)
CWE: CWE-91
References: https://www.oracle.com/security-alerts/oracle-open-source-cves-outside-other-oracle-public-documents.html; https://www.oracle.com/security-alerts/oracle-open-source-cves-outside-other-oracle-public-documents.html
CVE: CVE-2021-32823
Published: 2021-06-24
Description: In the bindata RubyGem before version 2.4.10 there is a potential denial-of-service vulnerability. In affected versions it is very slow for certain classes in BinData to be created. For example BinData::Bit100000, BinData::Bit100001, BinData::Bit100002, BinData::Bit<N>. In combination with <user_input>.constantize there is a potential for a CPU-based DoS. In version 2.4.10 bindata improved the creation time of Bits and Integers.
CVSS Score: 3.7 (LOW)
CWE: CWE-400
References: https://about.gitlab.com/releases/2021/06/01/security-release-gitlab-13-12-2-released/#update-bindata-dependency; https://github.com/dmendel/bindata/blob/v2.4.10/ChangeLog.rdoc#version-2410-2021-05-18-; https://github.com/dmendel/bindata/commit/d99f050b88337559be2cb35906c1f8da49531323
CVE: CVE-2021-35041
Published: 2021-06-24
Description: The blockchain node in FISCO-BCOS V2.7.2 may have a bug when dealing with unformatted packet and lead to a crash. A malicious node can send a packet continuously. The packet is in an incorrect format and cannot be decoded by the node correctly. As a result, the node may consume the memory sustainably and crash. More details are shown at: https://github.com/FISCO-BCOS/FISCO-BCOS/issues/1951
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: https://github.com/FISCO-BCOS/FISCO-BCOS/issues/1951; https://github.com/FISCO-BCOS/FISCO-BCOS/issues/1951
CVE: CVE-2021-28800
Published: 2021-06-24
Description: A command injection vulnerability has been reported to affect QNAP NAS running legacy versions of QTS. If exploited, this vulnerability allows attackers to execute arbitrary commands in a compromised application. This issue affects: QNAP Systems Inc. QTS versions prior to 4.3.6.1663 Build 20210504; versions prior to 4.3.3.1624 Build 20210416. This issue does not affect: QNAP Systems Inc. QTS 4.5.3. QNAP Systems Inc. QuTS hero h4.5.3. QNAP Systems Inc. QuTScloud c4.5.5.
CVSS Score: 8.1 (HIGH)
CWE: CWE-78
References: https://www.qnap.com/zh-tw/security-advisory/qsa-21-28; https://www.qnap.com/zh-tw/security-advisory/qsa-21-28
CVE: CVE-2021-25649
Published: 2021-06-24
Description: An information disclosure vulnerability was discovered in the directory and file management of Avaya Aura Utility Services. This vulnerability may potentially allow any local user to access system functionality and configuration information that should only be available to a privileged user. Affects all 7.x versions of Avaya Aura Utility Services
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-200
References: https://support.avaya.com/css/P8/documents/101072728; https://support.avaya.com/css/P8/documents/101072728
CVE: CVE-2021-25650
Published: 2021-06-24
Description: A privilege escalation vulnerability was discovered in Avaya Aura Utility Services that may potentially allow a local user to execute specially crafted scripts as a privileged user. Affects all 7.x versions of Avaya Aura Utility Services
CVSS Score: 7.7 (HIGH)
CWE: CWE-250, CWE-269
References: https://support.avaya.com/css/P8/documents/101072728; https://support.avaya.com/css/P8/documents/101072728
CVE: CVE-2021-25651
Published: 2021-06-24
Description: A privilege escalation vulnerability was discovered in Avaya Aura Utility Services that may potentially allow a local user to escalate privileges. Affects all 7.x versions of Avaya Aura Utility Services
CVSS Score: 8.0 (HIGH)
CWE: CWE-250, CWE-269
References: https://support.avaya.com/css/P8/documents/101072728; https://support.avaya.com/css/P8/documents/101072728
CVE: CVE-2021-25652
Published: 2021-06-24
Description: An information disclosure vulnerability was discovered in the directory and file management of Avaya Aura Appliance Virtualization Platform Utilities (AVPU). This vulnerability may potentially allow any local user to access system functionality and configuration information that should only be available to a privileged user. Affects versions 8.0.0.0 through 8.1.3.1 of AVPU.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-200, CWE-668
References: https://support.avaya.com/css/P8/documents/101076479; https://support.avaya.com/css/P8/documents/101076479
CVE: CVE-2021-25653
Published: 2021-06-24
Description: A privilege escalation vulnerability was discovered in Avaya Aura Appliance Virtualization Platform Utilities (AVPU) that may potentially allow a local user to escalate privileges. Affects 8.0.0.0 through 8.1.3.1 versions of AVPU.
CVSS Score: 8.0 (HIGH)
CWE: CWE-250
References: https://support.avaya.com/css/P8/documents/101076479; https://support.avaya.com/css/P8/documents/101076479
CVE: CVE-2021-25655
Published: 2021-06-24
Description: A vulnerability in the system Service Menu component of Avaya Aura Experience Portal may allow URL Redirection to any untrusted site through a crafted attack. Affected versions include 7.0 through 7.2.3 (without hotfix) and 8.0.0 (without hotfix).
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-601, CWE-601
References: https://downloads.avaya.com/css/P8/documents/101076234; https://downloads.avaya.com/css/P8/documents/101076234
CVE: CVE-2021-25656
Published: 2021-06-24
Description: Stored XSS injection vulnerabilities were discovered in the Avaya Aura Experience Portal Web management which could allow an authenticated user to potentially disclose sensitive information. Affected versions include 7.0 through 7.2.3 (without hotfix) and 8.0.0 (without hotfix).
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://downloads.avaya.com/css/P8/documents/101076234; https://downloads.avaya.com/css/P8/documents/101076234
CVE: CVE-2020-7862
Published: 2021-06-24
Description: A vulnerability in agent program of HelpU remote control solution could allow an authenticated remote attacker to execute arbitrary commands This vulnerability is due to insufficient input santization when communicating customer process.
CVSS Score: 7.0 (HIGH)
CWE: CWE-20, CWE-120, CWE-20
References: https://helpu.co.kr/customer/download.html; https://krcert.or.kr/krcert/secNoticeView.do?bulletin_writing_sequence=36094; https://helpu.co.kr/customer/download.html
CVE: CVE-2021-21737
Published: 2021-06-24
Description: A smart STB product of ZTE is impacted by a permission and access control vulnerability. Due to insufficient protection of system application, attackers could use this vulnerability to tamper with the system desktop and affect system customization functions. This affects: ZXV10 B860H V5.0, V83[PII_REDACTED], V83[PII_REDACTED]
CVSS Score: 7.5 (HIGH)
CWE: CWE-276
References: https://support.zte.com.cn/support/news/LoopholeInfoDetail.aspx?newsId=1016004; https://support.zte.com.cn/support/news/LoopholeInfoDetail.aspx?newsId=1016004
CVE: CVE-2021-25923
Published: 2021-06-24
Description: In OpenEMR, versions 5.0.0 to 6.0.0.1 are vulnerable to weak password requirements as it does not enforce a maximum password length limit. If a malicious user is aware of the first 72 characters of the victim user’s password, he can leverage it to an account takeover.
CVSS Score: 8.1 (HIGH)
CWE: CWE-521
References: https://github.com/openemr/openemr/commit/28ca5c008d4a408b60001a67dfd3e0915f9181e0; https://www.whitesourcesoftware.com/vulnerability-database/CVE-2021-25923; https://github.com/openemr/openemr/commit/28ca5c008d4a408b60001a67dfd3e0915f9181e0
CVE: CVE-2020-28097
Published: 2021-06-24
Description: The vgacon subsystem in the Linux kernel before 5.8.10 mishandles software scrollback. There is a vgacon_scrolldelta out-of-bounds read, aka CID-973c096f6a85.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-125
References: https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.8.10; https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=973c096f6a85e5b5f2a295126ba6928d9a6afd45; https://github.com/torvalds/linux/commit/973c096f6a85e5b5f2a295126ba6928d9a6afd45
CVE: CVE-2021-26585
Published: 2021-06-24
Description: A potential vulnerability has been identified in HPE OneView Global Dashboard release 2.31 which could lead to a local disclosure of privileged information. HPE has provided an update to OneView Global Dashboard. The issue is resolved in 2.32.
CVSS Score: 5.5 (MEDIUM)
References: https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf04162en_us; https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf04162en_us
CVE: CVE-2021-31412
Published: 2021-06-24
Description: Improper sanitization of path in default RouteNotFoundError view in com.vaadin:flow-server versions 1.0.0 through 1.0.14 (Vaadin 10.0.0 through 10.0.18), 1.1.0 prior to 2.0.0 (Vaadin 11 prior to 14), 2.0.0 through 2.6.1 (Vaadin 14.0.0 through 14.6.1), and 3.0.0 through 6.0.9 (Vaadin 15.0.0 through 19.0.8) allows network attacker to enumerate all available routes via crafted HTTP request when application is running in production mode and no custom handler for NotFoundException is provided.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-1295, CWE-20
References: https://github.com/vaadin/flow/pull/11107; https://vaadin.com/security/cve-2021-31412; https://github.com/vaadin/flow/pull/11107
CVE: CVE-2021-33604
Published: 2021-06-24
Description: URL encoding error in development mode handler in com.vaadin:flow-server versions 2.0.0 through 2.6.1 (Vaadin 14.0.0 through 14.6.1), 3.0.0 through 6.0.9 (Vaadin 15.0.0 through 19.0.8) allows local user to execute arbitrary JavaScript code by opening crafted URL in browser.
CVSS Score: 2.5 (LOW)
CWE: CWE-172
References: https://github.com/vaadin/flow/pull/11099; https://vaadin.com/security/cve-2021-33604; https://github.com/vaadin/flow/pull/11099
CVE: CVE-2021-23991
Published: 2021-06-24
Description: If a Thunderbird user has previously imported Alice's OpenPGP key, and Alice has extended the validity period of her key, but Alice's updated key has not yet been imported, an attacker may send an email containing a crafted version of Alice's key with an invalid subkey, Thunderbird might subsequently attempt to use the invalid subkey, and will fail to send encrypted email to Alice. This vulnerability affects Thunderbird < 78.9.1.
CVSS Score: 6.8 (MEDIUM)
References: https://bugzilla.mozilla.org/show_bug.cgi?id=1673240; https://www.mozilla.org/security/advisories/mfsa2021-13/; https://bugzilla.mozilla.org/show_bug.cgi?id=1673240
CVE: CVE-2021-23992
Published: 2021-06-24
Description: Thunderbird did not check if the user ID associated with an OpenPGP key has a valid self signature. An attacker may create a crafted version of an OpenPGP key, by either replacing the original user ID, or by adding another user ID. If Thunderbird imports and accepts the crafted key, the Thunderbird user may falsely conclude that the false user ID belongs to the correspondent. This vulnerability affects Thunderbird < 78.9.1.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-347
References: https://bugzilla.mozilla.org/show_bug.cgi?id=1666236; https://www.mozilla.org/security/advisories/mfsa2021-13/; https://bugzilla.mozilla.org/show_bug.cgi?id=1666236
CVE: CVE-2021-23993
Published: 2021-06-24
Description: An attacker may perform a DoS attack to prevent a user from sending encrypted email to a correspondent. If an attacker creates a crafted OpenPGP key with a subkey that has an invalid self signature, and the Thunderbird user imports the crafted key, then Thunderbird may try to use the invalid subkey, but the RNP library rejects it from being used, causing encryption to fail. This vulnerability affects Thunderbird < 78.9.1.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-347
References: https://bugzilla.mozilla.org/show_bug.cgi?id=1666360; https://www.mozilla.org/security/advisories/mfsa2021-13/; https://bugzilla.mozilla.org/show_bug.cgi?id=1666360
CVE: CVE-2021-23994
Published: 2021-06-24
Description: A WebGL framebuffer was not initialized early enough, resulting in memory corruption and an out of bound write. This vulnerability affects Firefox ESR < 78.10, Thunderbird < 78.10, and Firefox < 88.
CVSS Score: 8.8 (HIGH)
CWE: CWE-909
References: https://bugzilla.mozilla.org/show_bug.cgi?id=1699077; https://www.mozilla.org/security/advisories/mfsa2021-14/; https://www.mozilla.org/security/advisories/mfsa2021-15/
CVE: CVE-2021-23995
Published: 2021-06-24
Description: When Responsive Design Mode was enabled, it used references to objects that were previously freed. We presume that with enough effort this could have been exploited to run arbitrary code. This vulnerability affects Firefox ESR < 78.10, Thunderbird < 78.10, and Firefox < 88.
CVSS Score: 8.8 (HIGH)
CWE: CWE-672
References: https://bugzilla.mozilla.org/show_bug.cgi?id=1699835; https://www.mozilla.org/security/advisories/mfsa2021-14/; https://www.mozilla.org/security/advisories/mfsa2021-15/
CVE: CVE-2021-23996
Published: 2021-06-24
Description: By utilizing 3D CSS in conjunction with Javascript, content could have been rendered outside the webpage's viewport, resulting in a spoofing attack that could have been used for phishing or other attacks on a user. This vulnerability affects Firefox < 88.
CVSS Score: 6.5 (MEDIUM)
References: https://bugzilla.mozilla.org/show_bug.cgi?id=1701834; https://www.mozilla.org/security/advisories/mfsa2021-16/; https://bugzilla.mozilla.org/show_bug.cgi?id=1701834
CVE: CVE-2021-23997
Published: 2021-06-24
Description: Due to unexpected data type conversions, a use-after-free could have occurred when interacting with the font cache. We presume that with enough effort this could have been exploited to run arbitrary code. This vulnerability affects Firefox < 88.
CVSS Score: 8.8 (HIGH)
CWE: CWE-681
References: https://bugzilla.mozilla.org/show_bug.cgi?id=1701942; https://www.mozilla.org/security/advisories/mfsa2021-16/; https://bugzilla.mozilla.org/show_bug.cgi?id=1701942
CVE: CVE-2021-23998
Published: 2021-06-24
Description: Through complicated navigations with new windows, an HTTP page could have inherited a secure lock icon from an HTTPS page. This vulnerability affects Firefox ESR < 78.10, Thunderbird < 78.10, and Firefox < 88.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-345
References: https://bugzilla.mozilla.org/show_bug.cgi?id=1667456; https://www.mozilla.org/security/advisories/mfsa2021-14/; https://www.mozilla.org/security/advisories/mfsa2021-15/
CVE: CVE-2021-23999
Published: 2021-06-24
Description: If a Blob URL was loaded through some unusual user interaction, it could have been loaded by the System Principal and granted additional privileges that should not be granted to web content. This vulnerability affects Firefox ESR < 78.10, Thunderbird < 78.10, and Firefox < 88.
CVSS Score: 8.8 (HIGH)
CWE: CWE-269, CWE-697
References: https://bugzilla.mozilla.org/show_bug.cgi?id=1691153; https://www.mozilla.org/security/advisories/mfsa2021-14/; https://www.mozilla.org/security/advisories/mfsa2021-15/
CVE: CVE-2021-24000
Published: 2021-06-24
Description: A race condition with requestPointerLock() and setTimeout() could have resulted in a user interacting with one tab when they believed they were on a separate tab. In conjunction with certain elements (such as &lt;input type="file"&gt;) this could have led to an attack where a user was confused about the origin of the webpage and potentially disclosed information they did not intend to. This vulnerability affects Firefox < 88.
CVSS Score: 3.1 (LOW)
CWE: CWE-362
References: https://bugzilla.mozilla.org/show_bug.cgi?id=1694698; https://www.mozilla.org/security/advisories/mfsa2021-16/; https://bugzilla.mozilla.org/show_bug.cgi?id=1694698
CVE: CVE-2021-24001
Published: 2021-06-24
Description: A compromised content process could have performed session history manipulations it should not have been able to due to testing infrastructure that was not restricted to testing-only configurations. This vulnerability affects Firefox < 88.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-668
References: https://bugzilla.mozilla.org/show_bug.cgi?id=1694727; https://www.mozilla.org/security/advisories/mfsa2021-16/; https://bugzilla.mozilla.org/show_bug.cgi?id=1694727