Vulnerability · Published Jun 24, 2021 · Assigned by mozilla

CVE-2021-29953

Medium 6.1

In plain English

A medium-severity security flaw in Firefox from Mozilla. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.6% (higher than 51% of all known vulnerabilities).

Severity (CVSS NVD)6.1Medium

Exploit odds (30 days)0.6%top 48.8% of all CVEs

Exploited in the wildNo reportsnot in CISA KEV

Attack toolingNoneno public tooling known

Official description

A malicious webpage could have forced a Firefox for Android user into executing attacker-controlled JavaScript in the context of another domain, resulting in a Universal Cross-Site Scripting vulnerability. *Note: This issue only affected Firefox for Android. Other operating systems are unaffected. Further details are being temporarily withheld to allow users an opportunity to update.*. This vulnerability affects Firefox < 88.0.1 and Firefox for Android < 88.1.3.

Affected products (as reported)

Vendor	Product	Versions
Mozilla	Firefox	unspecified – before 88.0.1
Mozilla	Firefox for Android	unspecified – before 88.1.3

References

https://www.mozilla.org/security/advisories/mfsa2021-20/ x_refsource_MISC
https://bugzilla.mozilla.org/show_bug.cgi?id=1701684 x_refsource_MISC