CVE-2021-29960: Medium severity Mozilla Firefox vulnerability
Published Jun 1, 2021
·Updated
Firefox used to cache the last filename used for printing a file. When generating a filename for printing, Firefox usually suggests the web page title. The caching and suggestion techniques combined may have lead to the title of a website visited during private browsing mode being stored on disk.
Affected Software
17 affected componentsFixes available
Mozilla Firefox<89
89
Mozilla Firefox>=78.11.0<89.0
alpine/firefox>=78.11.0<89.0-r0
89.0-r0
alpine/firefox>=78.11.0<89.0-r0
89.0-r0
alpine/firefox>=78.11.0<89.0-r0
89.0-r0
alpine/firefox>=78.11.0<89.0-r0
89.0-r0
alpine/firefox>=78.11.0<89.0-r0
89.0-r0
alpine/firefox>=78.11.0<89.0-r0
89.0-r0
alpine/firefox>=78.11.0<89.0-r0
89.0-r0
alpine/firefox>=78.11.0<89.0-r0
89.0-r0
alpine/firefox>=78.11.0<89.0-r0
89.0-r0
alpine/firefox>=78.11.0<89.0-r0
89.0-r0
alpine/firefox>=78.11.0<89.0-r0
89.0-r0
alpine/librewolf<89.0-r0
89.0-r0
alpine/librewolf<89.0-r0
89.0-r0
alpine/librewolf<89.0-r0
89.0-r0
alpine/librewolf<89.0-r0
89.0-r0
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Firefoxto a version that resolves this vulnerability.Fixed in 89 - Upgrade
Upgrade
alpine/firefoxto a version that resolves this vulnerability.Fixed in 89.0-r0 - Upgrade
Upgrade
alpine/librewolfto a version that resolves this vulnerability.Fixed in 89.0-r0
Event History
Jun 1, 2021
CVE Published
12:00 AM
Jun 24, 2021
CVE Published
via MITRE·01:16 PM
Data Sourced
via MITRE·01:16 PM
DescriptionWeakness
Data Sourced
via NVD·02:15 PM
DescriptionSeverityWeaknessAffected Software
Data Sourced
via OSV·02:15 PM
DescriptionSeverityAffected Software
Peer vulnerabilities
Found alongside the following vulnerabilities.
Frequently Asked Questions
1
Is CVE-2021-29960 a local or remote vulnerability?
CVE-2021-29960 is considered a local vulnerability as it involves access to cached private browsing data.