Friday, November 5, 2021

MFSA2021-49 Firefox: Security Vulnerabilities fixed in Firefox ESR 91.3 (CVE-2021-38508)

rapid7 vulnerabilities In: , 
Description
By displaying a form validity message in the correct location at the same time as a permission prompt (such as for geolocation), the validity message could have obscured the prompt, resulting in the user potentially being tricked into granting the permission.
Solution(s)
  • mozilla-firefox-esr-upgrade-91_3


    • References
  • https://attackerkb.com/topics/cve-2021-38508
  • CVE - 2021-38508
  • http://www.mozilla.org/security/announce/2021/mfsa2021-49.html




    •  

    Copyright © 2021 Vulnerability Database | Cyber Details™

    thank you Templateism for the design - You should have written the code a little more complicated - Nothing Encrypted anymore