CVE-2021-43532: Medium severity firefox vulnerability
The 'Copy Image Link' context menu action would copy the final image URL after redirects. By embedding an image that triggered authentication flows - in conjunction with a Content Security Policy that stopped a redirection chain in the middle - the final image URL could be one that contained an authentication token used to takeover a user account. If a website tricked a user into copy and pasting the image link back to the page, the page would be able to steal the authentication tokens. This was fixed by making the action return the original URL, before any redirects.
Affected Software
Event History
Peer vulnerabilities
Found alongside the following vulnerabilities.
Frequently Asked Questions
What is the vulnerability ID?
The vulnerability ID is CVE-2021-43532.
What is the severity of CVE-2021-43532?
The severity of CVE-2021-43532 is medium with a severity value of 6.1.
Which software is affected by CVE-2021-43532?
The affected software is Mozilla Firefox version up to exclusive 94.0.
How can I fix CVE-2021-43532?
To fix CVE-2021-43532, update Mozilla Firefox to version 94 or above.
Where can I find more information about CVE-2021-43532?
You can find more information about CVE-2021-43532 on the following websites: - [Mozilla Bugzilla](https://bugzilla.mozilla.org/show_bug.cgi?id=1719203) - [Mozilla Security Advisories](https://www.mozilla.org/en-US/security/advisories/mfsa2021-48/)