Vulnerability in Mozilla Firefox
CVE-2021-43533
When parsing internationalized domain names, high bits of the characters in the URLs were sometimes stripped, resulting in inconsistencies that could lead to user confusion or attacks such as phishing. This vulnerability affects Firefox < 94.
EPSS: 0.005 (42.5th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 4.3 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N.
Affected products
- Mozilla Firefox — versions unspecified
References
- security@mozilla.org (x_refsource_MISC, Vendor Advisory)
- security@mozilla.org (Permissions Required, x_refsource_MISC, Issue Tracking, Vendor Advisory)
Frequently asked questions
- What is CVE-2021-43533?
- CVE-2021-43533 is a medium-severity vulnerability in Mozilla Firefox. CVSS score: 4.3/10. Published 2021-12-08.
- How severe is CVE-2021-43533?
- Medium severity. CVSS v3 base score is 4.3 out of 10.