Debian/firefox-esr: high 8.8
If a Blob URL was loaded through some unusual user interaction, it could have been loaded by the System Principal and granted additional privileges that should not be granted to web content. This vuln
Action: Upgrade firefox-esr to 78.10.0esr-1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 78.10.0esr-1 | - |
Fixed versions
| 78.10.0esr-1 |
Sources
- osv: DEBIAN-CVE-2021-23999#Debian:13/firefox-esr
- https://security-tracker.debian.org/tracker/CVE-2021-23999
published · modified · JSON