What is CVE-2021-43544?

CVE-2021-43544 is a medium-severity vulnerability in Google Android, classified under Cross-site Scripting. CVSS score: 6.1/10. Published 2021-12-08.

How severe is CVE-2021-43544?

Medium severity. CVSS v3 base score is 6.1 out of 10.

XSS in Google Android

CVE-2021-43544

When receiving a URL through a SEND intent, Firefox would have searched for the text, but subsequent usages of the address bar might have caused the URL to load unintentionally, which could lead to XSS and spoofing attacks. *This bug only affects Firefox for Android. Other operating systems are unaffected.*. This vulnerability affects Firefox < 95.

Vulnerability class: XSS (Cross-Site Scripting)

EPSS: 0.005 (40.5th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 6.1 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N.

Affected products

Google Android
Mozilla Firefox — versions unspecified

Weakness classification (CWE)

CWE-79 — Cross-site Scripting

References

security@mozilla.org (x_refsource_MISC, Vendor Advisory)
security@mozilla.org (Permissions Required, x_refsource_MISC, Issue Tracking)

Frequently asked questions

What is CVE-2021-43544?: CVE-2021-43544 is a medium-severity vulnerability in Google Android, classified under Cross-site Scripting. CVSS score: 6.1/10. Published 2021-12-08.
How severe is CVE-2021-43544?: Medium severity. CVSS v3 base score is 6.1 out of 10.