Lucene search
Veracode Vulnerability DatabaseVERACODE:32813HistoryNov 05, 2021 - 3:36 a.m.
Function Spoofing
2021-11-0503:36:47
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
30
0.002 Low
EPSS
Percentile
61.8%
firefox is vulnerable to function spoofing. By displaying a form validity message in the correct location at the same time as a permission prompt (such as for geolocation), the validity message could have obscured the prompt, resulting in the user potentially being tricked into granting the permission.
References
bugzilla.mozilla.org/show_bug.cgi?id=1366818
lists.debian.org/debian-lts-announce/2021/12/msg00030.html
lists.debian.org/debian-lts-announce/2022/01/msg00001.html
secdb.alpinelinux.org/edge/community.yaml
security.gentoo.org/glsa/202202-03
security.gentoo.org/glsa/202208-14
www.debian.org/security/2021/dsa-5026
www.debian.org/security/2022/dsa-5034
www.mozilla.org/security/advisories/mfsa2021-48/
www.mozilla.org/security/advisories/mfsa2021-49/
www.mozilla.org/security/advisories/mfsa2021-50/
Related
alpinelinux
alpinelinux
CVE-2021-38508
2021-12-08 22:15:09
cvelist
cvelist
CVE-2021-38508
2021-12-08 21:21:35
nvd
nvd
CVE-2021-38508
2021-12-08 22:15:09
debiancve
debiancve
CVE-2021-38508
2021-12-08 22:15:09
prion
prion
Design/Logic Flaw
2021-12-08 22:15:00
ubuntucve
ubuntucve
CVE-2021-38508
2021-11-03 00:00:00
cve
cve
CVE-2021-38508
2021-12-08 22:15:09
cnvd
cnvd
Mozilla Firefox has an unspecified vulnerability (CNVD-2021-101166)
2021-11-04 00:00:00
redhatcve
redhatcve
CVE-2021-38508
2021-11-03 01:10:08
nessus
nessus
Oracle Linux 7 : firefox (ELSA-2021-4116)
2021-11-04 00:00:00
CentOS 7 : thunderbird (CESA-2021:4134)
2021-11-17 00:00:00
Oracle Linux 8 : firefox (ELSA-2021-4123)
2021-11-05 00:00:00
openvas
openvas
CentOS: Security Advisory for thunderbird (CESA-2021:4134)
2021-11-18 00:00:00
Mozilla Firefox Security Advisory (MFSA2021-48) - Linux
2021-11-08 00:00:00
CentOS: Security Advisory for firefox (CESA-2021:4116)
2021-11-18 00:00:00
osv
osv
Important: thunderbird security update
2021-11-04 16:03:41
Important: firefox security update
2021-11-03 19:23:08
firefox vulnerabilities
2021-11-03 20:09:06
ubuntu
ubuntu
Firefox vulnerabilities
2021-11-03 00:00:00
Thunderbird vulnerabilities
2022-01-21 00:00:00
almalinux
almalinux
Important: firefox security update
2021-11-03 19:23:08
Important: thunderbird security update
2021-11-04 16:03:41
oraclelinux
oraclelinux
firefox security update
2021-11-04 00:00:00
thunderbird security update
2021-11-05 00:00:00
thunderbird security update
2021-11-05 00:00:00
archlinux
archlinux
[ASA-202111-2] firefox: multiple issues
2021-11-05 00:00:00
[ASA-202111-3] thunderbird: multiple issues
2021-11-05 00:00:00
mageia
mageia
Updated firefox packages fix security vulnerability
2021-11-11 01:53:34
Updated thunderbird packages fix security vulnerabilities
2021-11-11 01:53:34
altlinux
altlinux
Security fix for the ALT Linux 10 package firefox-esr version 91.3.0-alt1
2021-11-09 00:00:00
Security fix for the ALT Linux 10 package thunderbird version 91.3.0-alt1
2021-11-10 00:00:00
rocky
rocky
firefox security update
2021-11-03 19:23:08
thunderbird security update
2021-11-04 16:03:41
suse
suse
Security update for MozillaFirefox (important)
2021-11-19 00:00:00
Security update for MozillaThunderbird (important)
2021-12-22 00:00:00
Security update for MozillaThunderbird (important)
2021-12-29 00:00:00
redhat
redhat
(RHSA-2021:4607) Important: firefox security update
2021-11-10 09:03:16
(RHSA-2021:4116) Important: firefox security update
2021-11-03 14:54:02
(RHSA-2021:4123) Important: firefox security update
2021-11-03 19:23:08
centos
centos
firefox security update
2021-11-17 15:24:37
thunderbird security update
2021-11-17 15:26:59
mozilla
mozilla
Security Vulnerabilities fixed in Firefox ESR 91.3 — Mozilla
2021-11-02 00:00:00
Security Vulnerabilities fixed in Thunderbird 91.3 — Mozilla
2021-11-03 00:00:00
Security Vulnerabilities fixed in Firefox 94 — Mozilla
2021-11-02 00:00:00
kaspersky
kaspersky
KLA12336 Multiple vulnerabilities in Mozilla Firefox ESR
2021-11-02 00:00:00
KLA12352 Multiple vulnerabilities in Mozilla Thunderbird
2021-11-03 00:00:00
KLA12335 Multiple vulnerabilities in Mozilla Firefox
2021-11-02 00:00:00
debian
debian
[SECURITY] [DSA 5026-1] firefox-esr security update
2021-12-19 15:23:09
[SECURITY] [DLA 2863-1] firefox-esr security update
2021-12-29 14:08:44
[SECURITY] [DSA 5034-1] thunderbird security update
2022-01-02 17:01:50
ibm
ibm
gentoo
gentoo
Mozilla Firefox: Multiple vulnerabilities
2022-02-21 00:00:00
Mozilla Thunderbird: Multiple Vulnerabilities
2022-08-10 00:00:00