CVE-2021-29973

Reference Links

• https://bugzilla.mozilla.org/show_bug.cgi?id=1701932
• https://www.mozilla.org/en-US/security/advisories/mfsa2021-28/
• https://www.mozilla.org/security/advisories/mfsa2021-28/

Parent vulnerabilities

(Appears in the following advisories)

• MFSA2021-28

Peer vulnerabilities

(Found alongside the following vulnerabilities)

• CVE-2021-29970
• CVE-2021-29971
• CVE-2021-30547
• CVE-2021-29972
• CVE-2021-29973
• CVE-2021-29974
• CVE-2021-29975
• CVE-2021-29976
• CVE-2021-29977

Frequently Asked Questions

• What is the severity of CVE-2021-29973?

  CVE-2021-29973 is considered a moderate severity vulnerability as it impacts user privacy by allowing password autofill on insecure websites.

• How do I fix CVE-2021-29973?

  To fix CVE-2021-29973, update your Firefox for Android to version 90 or later, where this issue has been addressed.

• Who is affected by CVE-2021-29973?

  CVE-2021-29973 specifically affects users of Firefox for Android versions prior to 90.

• What does CVE-2021-29973 exploit?

  CVE-2021-29973 exploits the password autofill feature which was previously enabled without user interaction on insecure websites.

• Is CVE-2021-29973 a critical vulnerability?

  No, CVE-2021-29973 is not classified as critical, but it poses a privacy risk by potentially exposing user passwords.