CWE
79
Advisory Published
Updated

CVE-2021-44748: Universal Cross-Site Scripting Vulnerability in F-Secure SAFE Browser for Android

First published: Sun Mar 06 2022(Updated: )

A vulnerability affecting F-Secure SAFE browser was discovered whereby browsers loads images automatically this vulnerability can be exploited remotely by an attacker to execute the JavaScript can be used to trigger universal cross-site scripting through the browser. User interaction is required prior to exploitation, such as entering a malicious website to trigger the vulnerability.

Credit: cve-notifications-us@f-secure.com

Affected SoftwareAffected VersionHow to fix
F-secure Safe=18.5

Remedy

FIX : A fix has been released in the automatic update channel since 18th February 2022. No user action is required if automatic update is enabled.

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Frequently Asked Questions

  • What is the vulnerability ID of this vulnerability?

    The vulnerability ID is CVE-2021-44748.

  • Which software is affected by this vulnerability?

    The F-Secure SAFE browser version 18.5 is affected by this vulnerability.

  • What is the severity rating of CVE-2021-44748?

    The severity rating of CVE-2021-44748 is medium with a value of 6.1.

  • How does this vulnerability get exploited?

    This vulnerability can be exploited remotely by an attacker to execute JavaScript which triggers universal cross-site scripting through the browser.

  • How can this vulnerability be fixed?

    To fix this vulnerability, it is recommended to update to the latest version of F-Secure SAFE browser.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2024 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203