CVE-2021-43536: Infoleak
Under certain circumstances, asynchronous functions could have caused a navigation to fail but expose the target URL.
Affected Software
Event History
Parent advisories
This vulnerability appears in the following advisories.
Peer vulnerabilities
Found alongside the following vulnerabilities.
Frequently Asked Questions
What is the severity of CVE-2021-43536?
CVE-2021-43536 has a moderate severity rating and can potentially expose sensitive URL information.
How do I fix CVE-2021-43536?
To fix CVE-2021-43536, update Thunderbird to version 91.4.0 or later, and Firefox ESR to version 91.4.0 or later.
Which software versions are affected by CVE-2021-43536?
CVE-2021-43536 affects Thunderbird versions prior to 91.4.0 and Firefox ESR versions prior to 91.4.0.
Can CVE-2021-43536 be exploited remotely?
Yes, CVE-2021-43536 can be exploited remotely under certain conditions due to the exposure of target URLs.
What platforms are impacted by CVE-2021-43536?
CVE-2021-43536 impacts platforms running affected versions of Thunderbird and Firefox, including Debian Linux distributions.