Lucene search
PRIOn knowledge basePRION:CVE-2021-38508HistoryDec 08, 2021 - 10:15 p.m.
Design/Logic Flaw
2021-12-0822:15:00
PRIOn knowledge base
www.prio-n.com
2
By displaying a form validity message in the correct location at the same time as a permission prompt (such as for geolocation), the validity message could have obscured the prompt, resulting in the user potentially being tricked into granting the permission. This vulnerability affects Firefox < 94, Thunderbird < 91.3, and Firefox ESR < 91.3.
| CPE | Name | Operator | Version |
|---|---|---|---|
| debian_linux | eq | 9.0 | |
| debian_linux | eq | 10.0 | |
| debian_linux | eq | 11.0 | |
| firefox | lt | 94.0 | |
| firefox_esr | lt | 91.3.0 | |
| thunderbird | lt | 91.3.0 |
References
bugzilla.mozilla.org/show_bug.cgi?id=1366818
lists.debian.org/debian-lts-announce/2021/12/msg00030.html
lists.debian.org/debian-lts-announce/2022/01/msg00001.html
security.gentoo.org/glsa/202202-03
security.gentoo.org/glsa/202208-14
www.debian.org/security/2021/dsa-5026
www.debian.org/security/2022/dsa-5034
www.mozilla.org/security/advisories/mfsa2021-48/
www.mozilla.org/security/advisories/mfsa2021-49/
www.mozilla.org/security/advisories/mfsa2021-50/
Related
nvd
nvd
CVE-2021-38508
2021-12-08 22:15:09
debiancve
debiancve
CVE-2021-38508
2021-12-08 22:15:09
alpinelinux
alpinelinux
CVE-2021-38508
2021-12-08 22:15:09
cvelist
cvelist
CVE-2021-38508
2021-12-08 21:21:35
ubuntucve
ubuntucve
CVE-2021-38508
2021-11-03 00:00:00
cve
cve
CVE-2021-38508
2021-12-08 22:15:09
veracode
veracode
Function Spoofing
2021-11-05 03:36:47
cnvd
cnvd
Mozilla Firefox has an unspecified vulnerability (CNVD-2021-101166)
2021-11-04 00:00:00
redhatcve
redhatcve
CVE-2021-38508
2021-11-03 01:10:08
oraclelinux
oraclelinux
thunderbird security update
2021-11-05 00:00:00
thunderbird security update
2021-11-05 00:00:00
firefox security update
2021-11-04 00:00:00
nessus
nessus
Oracle Linux 7 : thunderbird (ELSA-2021-4134)
2021-11-05 00:00:00
CentOS 7 : firefox (CESA-2021:4116)
2021-11-17 00:00:00
Oracle Linux 7 : firefox (ELSA-2021-4116)
2021-11-04 00:00:00
openvas
openvas
CentOS: Security Advisory for thunderbird (CESA-2021:4134)
2021-11-18 00:00:00
Mozilla Firefox Security Advisory (MFSA2021-48) - Linux
2021-11-08 00:00:00
CentOS: Security Advisory for firefox (CESA-2021:4116)
2021-11-18 00:00:00
osv
osv
Important: thunderbird security update
2021-11-04 16:03:41
Important: firefox security update
2021-11-03 19:23:08
firefox vulnerabilities
2021-11-03 20:09:06
ubuntu
ubuntu
Firefox vulnerabilities
2021-11-03 00:00:00
Thunderbird vulnerabilities
2022-01-21 00:00:00
almalinux
almalinux
Important: firefox security update
2021-11-03 19:23:08
Important: thunderbird security update
2021-11-04 16:03:41
archlinux
archlinux
[ASA-202111-2] firefox: multiple issues
2021-11-05 00:00:00
[ASA-202111-3] thunderbird: multiple issues
2021-11-05 00:00:00
centos
centos
firefox security update
2021-11-17 15:24:37
thunderbird security update
2021-11-17 15:26:59
altlinux
altlinux
Security fix for the ALT Linux 10 package thunderbird version 91.3.0-alt1
2021-11-10 00:00:00
Security fix for the ALT Linux 10 package firefox-esr version 91.3.0-alt1
2021-11-09 00:00:00
mageia
mageia
Updated firefox packages fix security vulnerability
2021-11-11 01:53:34
Updated thunderbird packages fix security vulnerabilities
2021-11-11 01:53:34
rocky
rocky
firefox security update
2021-11-03 19:23:08
thunderbird security update
2021-11-04 16:03:41
suse
suse
Security update for MozillaFirefox (important)
2021-11-19 00:00:00
Security update for MozillaThunderbird (important)
2021-12-22 00:00:00
Security update for MozillaThunderbird (important)
2021-12-29 00:00:00
redhat
redhat
(RHSA-2021:4607) Important: firefox security update
2021-11-10 09:03:16
(RHSA-2021:4116) Important: firefox security update
2021-11-03 14:54:02
(RHSA-2021:4123) Important: firefox security update
2021-11-03 19:23:08
kaspersky
kaspersky
KLA12336 Multiple vulnerabilities in Mozilla Firefox ESR
2021-11-02 00:00:00
KLA12352 Multiple vulnerabilities in Mozilla Thunderbird
2021-11-03 00:00:00
KLA12335 Multiple vulnerabilities in Mozilla Firefox
2021-11-02 00:00:00
mozilla
mozilla
Security Vulnerabilities fixed in Firefox ESR 91.3 — Mozilla
2021-11-02 00:00:00
Security Vulnerabilities fixed in Thunderbird 91.3 — Mozilla
2021-11-03 00:00:00
Security Vulnerabilities fixed in Firefox 94 — Mozilla
2021-11-02 00:00:00
debian
debian
[SECURITY] [DSA 5026-1] firefox-esr security update
2021-12-19 15:23:09
[SECURITY] [DLA 2863-1] firefox-esr security update
2021-12-29 14:08:44
[SECURITY] [DSA 5034-1] thunderbird security update
2022-01-02 17:01:50
ibm
ibm
gentoo
gentoo
Mozilla Firefox: Multiple vulnerabilities
2022-02-21 00:00:00
Mozilla Thunderbird: Multiple Vulnerabilities
2022-08-10 00:00:00