CVE-2021-29954: Critical severity mozilla hubs cloud reticulum vulnerability
Published May 6, 2021
·Updated
Proxy functionality built into Hubs Cloud’s Reticulum software allowed access to internal URLs, including the metadata service.
Affected Software
2 affected componentsFixes available
Mozilla Hubs Cloud mozillareality/reticulum//20210428201255<1.0.1
1.0.1
Mozilla Hubs Cloud Reticulum<1.0.1
Event History
May 6, 2021
CVE Published
12:00 AM
Jun 24, 2021
CVE Published
via MITRE·01:17 PM
Data Sourced
via MITRE·01:17 PM
DescriptionWeakness
Frequently Asked Questions
1
What is the severity of CVE-2021-29954?
CVE-2021-29954 is rated with a severity level that indicates risk due to exposure of internal URLs.
2
How do I fix CVE-2021-29954?
To fix CVE-2021-29954, you should update Hubs Cloud's Reticulum software to version 1.0.1 or later.
3
What types of software are affected by CVE-2021-29954?
CVE-2021-29954 affects the Mozilla Hubs Cloud Reticulum software versions prior to 1.0.1.
4
What is the impact of CVE-2021-29954?
The impact of CVE-2021-29954 allows unauthorized access to internal URLs, potentially exposing sensitive information.
5
When was CVE-2021-29954 disclosed?
CVE-2021-29954 was disclosed as part of the Mozilla security advisories in 2021.