CVE-2021-43543: XSS
Documents loaded with the CSP sandbox directive could have escaped the sandbox's script restriction by embedding additional content.
Affected Software
Event History
Parent advisories
This vulnerability appears in the following advisories.
Peer vulnerabilities
Found alongside the following vulnerabilities.
Frequently Asked Questions
What is the severity of CVE-2021-43543?
CVE-2021-43543 is rated as a medium severity vulnerability.
How do I fix CVE-2021-43543?
To fix CVE-2021-43543, update Mozilla Thunderbird to version 91.4 or later, or update Firefox ESR to versions above 91.4.
Which software is affected by CVE-2021-43543?
CVE-2021-43543 affects Mozilla Thunderbird versions less than 91.4, Firefox ESR versions less than 91.4, and specific Debian packages of Firefox and Thunderbird.
What does CVE-2021-43543 allow attackers to do?
CVE-2021-43543 allows attackers to escape the sandbox's script restriction within documents loaded with the CSP sandbox directive.
Is CVE-2021-43543 a remote code execution vulnerability?
No, CVE-2021-43543 does not involve remote code execution but could lead to unauthorized content execution within the application's sandbox.