CVE-2021-29953: XSS
A malicious webpage could have forced a Firefox for Android user into executing attacker-controlled JavaScript in the context of another domain, resulting in a Universal Cross-Site Scripting vulnerability. Note: This issue only affected Firefox for Android. Other operating systems are unaffected. Further details are being temporarily withheld to allow users an opportunity to update.. This vulnerability affects Firefox < 88.0.1 and Firefox for Android < 88.1.3.
Other sources
By triggering multiple pop-up prompts containing javascript: URLs, a malicious webpage could have forced a Firefox for Android user into executing attacker-controlled JavaScript in the context of another domain, resulting in a Universal Cross-Site Scripting vulnerability.Note: This issue only affected Firefox for Android. Other operating systems are unaffected.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2021-29953?
The severity of CVE-2021-29953 is classified as high due to its potential for Universal Cross-Site Scripting attacks.
How do I fix CVE-2021-29953?
To fix CVE-2021-29953, update Firefox for Android to version 88.1.3 or later.
Which versions of Firefox are affected by CVE-2021-29953?
CVE-2021-29953 affects Firefox for Android versions up to 88.1.3 and Firefox desktop versions up to 88.0.1.
Can CVE-2021-29953 affect other operating systems?
No, CVE-2021-29953 only affects Firefox for Android; other operating systems such as desktop versions are not impacted.
What type of vulnerability is CVE-2021-29953?
CVE-2021-29953 is a Universal Cross-Site Scripting vulnerability, allowing attackers to execute malicious JavaScript in a different domain.