CVE-2021-23974
26.02.2021, 02:15
The DOMParser API did not properly process '<noscript>' elements for escaping. This could be used as an mXSS vector to bypass an HTML Sanitizer. This vulnerability affects Firefox < 86.Enginsight
| Vendor | Product | Version |
|---|---|---|
| mozilla | firefox | 𝑥 < 86.0 |
𝑥
= Vulnerable software versions
Ubuntu Releases
Ubuntu Product | |||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| firefox |
| ||||||||||||||||||||||||
| mozjs38 |
| ||||||||||||||||||||||||
| mozjs52 |
| ||||||||||||||||||||||||
| mozjs60 |
| ||||||||||||||||||||||||
| mozjs68 |
| ||||||||||||||||||||||||
| mozjs78 |
|
References