CVE-2021-23973 — Information Exposure via Error Message in Mozilla Firefox
Severity
6.5MEDIUMNVD
OSV4.3
EPSS
0.5%
top 32.57%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedFeb 26
Latest updateMay 24
Description
When trying to load a cross-origin resource in an audio/video context a decoding error may have resulted, and the content of that error may have revealed information about the resource. This vulnerability affects Firefox < 86, Thunderbird < 78.8, and Firefox ESR < 78.8.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:NExploitability: 2.8 | Impact: 3.6
Affected Packages8 packages
Also affects: Debian Linux 10.0, 9.0
🔴Vulnerability Details
4GHSA▶
GHSA-jw3c-jgq3-cf92: When trying to load a cross-origin resource in an audio/video context a decoding error may have resulted, and the content of that error may have revea↗2022-05-24
CVEList▶
CVE-2021-23973: When trying to load a cross-origin resource in an audio/video context a decoding error may have resulted, and the content of that error may have revea↗2021-02-26
OSV▶
CVE-2021-23973: When trying to load a cross-origin resource in an audio/video context a decoding error may have resulted, and the content of that error may have revea↗2021-02-26