CVE-2021-44748: Universal Cross-Site Scripting Vulnerability in F-Secure SAFE Browser for Android

Published Mar 6, 2022

Updated

A vulnerability affecting F-Secure SAFE browser was discovered whereby browsers loads images automatically this vulnerability can be exploited remotely by an attacker to execute the JavaScript can be used to trigger universal cross-site scripting through the browser. User interaction is required prior to exploitation, such as entering a malicious website to trigger the vulnerability.

Affected Software

1 affected component

F-Secure Safe Android=18.5

Remediation

Information

FIX : A fix has been released in the automatic update channel since 18th February 2022. No user action is required if automatic update is enabled.

Event History

Mar 6, 2022

CVE Published

via MITRE·07:05 PM

Data Sourced

via MITRE·07:05 PM

RemedyDescriptionSeverityWeakness

Frequently Asked Questions

What is the vulnerability ID of this vulnerability?

The vulnerability ID is CVE-2021-44748.

Which software is affected by this vulnerability?

The F-Secure SAFE browser version 18.5 is affected by this vulnerability.

What is the severity rating of CVE-2021-44748?

The severity rating of CVE-2021-44748 is medium with a value of 6.1.

How does this vulnerability get exploited?

This vulnerability can be exploited remotely by an attacker to execute JavaScript which triggers universal cross-site scripting through the browser.

How can this vulnerability be fixed?

To fix this vulnerability, it is recommended to update to the latest version of F-Secure SAFE browser.