CVE-2021-23971: Medium severity Mozilla Firefox vulnerability
When processing a redirect with a conflicting Referrer-Policy, Firefox would have adopted the redirect's Referrer-Policy. This would have potentially resulted in more information than intended by the original origin being provided to the destination of the redirect.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Firefoxto a version that resolves this vulnerability.Fixed in 86 - Upgrade
Upgrade
alpine/firefoxto a version that resolves this vulnerability.Fixed in 87.0-r0 - Upgrade
Upgrade
alpine/librewolfto a version that resolves this vulnerability.Fixed in 87.0-r0
Event History
Peer vulnerabilities
Found alongside the following vulnerabilities.
Frequently Asked Questions
What is the severity of CVE-2021-23971?
CVE-2021-23971 has been classified as a moderate severity vulnerability.
How do I fix CVE-2021-23971?
To resolve CVE-2021-23971, update affected Mozilla Firefox versions to 87 or later.
Which versions of Firefox are affected by CVE-2021-23971?
CVE-2021-23971 affects Mozilla Firefox versions prior to 87, specifically those up to version 86.
What type of vulnerability is CVE-2021-23971?
CVE-2021-23971 is a redirect vulnerability related to improper handling of Referrer-Policy.
What potential impact does CVE-2021-23971 have on users?
CVE-2021-23971 could result in sensitive information being unintentionally shared with undesired destinations.