CVE-2021-4140 — XML Injection (aka Blind XPath Injection) in Mozilla Firefox

CWE-91 — XML Injection (aka Blind XPath Injection)CWE-1021 — UI Misrepresentation / Clickjacking13 documents8 sources

Severity

10.0CRITICALNVD

OSV8.8

EPSS

0.1%

top 80.11%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

Mozilla Firefox Mozilla Firefox ESR Mozilla Thunderbird

Timeline

PublishedDec 22

Description

It was possible to construct specific XSLT markup that would be able to bypass an iframe sandbox. This vulnerability affects Firefox ESR < 91.5, Firefox < 96, and Thunderbird < 91.5.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:HExploitability: 3.9 | Impact: 6.0

Affected Packages8 packages

▶CVEListV5mozilla/firefoxunspecified — 96

▶NVDmozilla/firefox< 96.0

▶CVEListV5mozilla/firefox_esrunspecified — 91.5

▶NVDmozilla/firefox_esr< 91.5

▶CVEListV5mozilla/thunderbirdunspecified — 91.5

Patches

Patch: bugzilla.mozilla.org ↗Patch: bugzilla.mozilla.org ↗

🔴Vulnerability Details

CVEList

CVE-2021-4140: It was possible to construct specific XSLT markup that would be able to bypass an iframe sandbox↗2022-12-22

▶

OSV

CVE-2021-4140: It was possible to construct specific XSLT markup that would be able to bypass an iframe sandbox↗2022-12-22

▶

GHSA

GHSA-h5mr-xp97-c4p5: It was possible to construct specific XSLT markup that would be able to bypass an iframe sandbox↗2022-12-22

▶

OSV

thunderbird vulnerabilities↗2022-01-21

▶

📋Vendor Advisories

Ubuntu

Thunderbird vulnerabilities↗2022-01-21

▶

Ubuntu

Thunderbird vulnerabilities↗2022-01-21

▶

Ubuntu

Firefox vulnerabilities↗2022-01-13

▶

Red Hat

Mozilla: Iframe sandbox bypass with XSLT↗2022-01-11

▶

Debian

CVE-2021-4140: firefox - It was possible to construct specific XSLT markup that would be able to bypass a...↗2021

▶