Vulnerability · Published Dec 8, 2021 · Assigned by mozilla

CVE-2021-43532

Medium 6.1

In plain English

A medium-severity security flaw in Firefox from Mozilla. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.5% (higher than 46% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS NVD)6.1Medium

Exploit odds (30 days)0.5%top 54.1% of all CVEs

Exploited in the wildNo reportsnot in CISA KEV

Attack toolingNoneno public tooling known

Official description

The 'Copy Image Link' context menu action would copy the final image URL after redirects. By embedding an image that triggered authentication flows - in conjunction with a Content Security Policy that stopped a redirection chain in the middle - the final image URL could be one that contained an authentication token used to takeover a user account. If a website tricked a user into copy and pasting the image link back to the page, the page would be able to steal the authentication tokens. This was fixed by making the action return the original URL, before any redirects. This vulnerability affects Firefox < 94.

Affected packages & fixed versions

Ecosystem	Package	Fixed in	Advisory
Ubuntu:22.04:LTS	firefox	94.0+build3-0ubuntu1	UBUNTU-CVE-2021-43532

Affected products (as reported)

Vendor	Product	Versions
Mozilla	Firefox	unspecified – before 94

References

https://www.mozilla.org/security/advisories/mfsa2021-48/ x_refsource_MISC
https://bugzilla.mozilla.org/show_bug.cgi?id=1719203 x_refsource_MISC