CVE-2021-4221

Katalog CVE

CVSS 4.3 · Medium EPSS 0,42%

Kerentanan Insufficient Visual Distinction of Homoglyphs Presented to User pada mozilla firefox. Skor CVSS 3.1 4.3 (Medium) menurut NVD.

Deskripsi (NVD)

If a domain name contained a RTL character, it would cause the domain to be rendered to the right of the path. This could lead to user confusion and spoofing attacks. <br>*This bug only affects Firefox for Android. Other operating systems are unaffected.*<br>*Note*: Due to a clerical error this advisory was not included in the original announcement, and was added in Feburary 2022. This vulnerability affects Firefox < 92.

Rincian

Terbit di NVD

22 Desember 2022

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

4.3 (Medium), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-1007: Insufficient Visual Distinction of Homoglyphs Presented to User

EPSS (30 hari)

0,42% peluang dieksploitasi; lebih tinggi dari 33,9% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://bugzilla.mozilla.org/show_bug.cgi?id=1704422 exploit · issue tracking · advisory vendor
• https://www.mozilla.org/security/advisories/mfsa2021-38/ advisory vendor