CVE-2021-43533

2021-12-0821:20:47

mozilla

www.cve.org

AI Score

6.2

Confidence

Low

EPSS

0.001

Percentile

33.3%

JSON

When parsing internationalized domain names, high bits of the characters in the URLs were sometimes stripped, resulting in inconsistencies that could lead to user confusion or attacks such as phishing. This vulnerability affects Firefox < 94.

CNA Affected

[
  {
    "product": "Firefox",
    "vendor": "Mozilla",
    "versions": [
      {
        "lessThan": "94",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  }
]