PT-2021-15629
CVE-2021-23972
·
تاريخ النشر
2021-02-23
·
تاريخ التحديث
2024-12-12
الوصف من
CVSS 3.1
8.8
عاليةالمقاييسAV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions:
Firefox versions prior to 86
Description:
A phishing tactic involves providing a link with HTTP Auth, such as 'https://www.phishingtarget.com@evil.com'. Firefox displays a warning dialog to mitigate this attack. However, if the malicious site uses a redirect cached by the browser, the warning dialog may not be displayed.
Recommendations:
For versions prior to 86, update to a version 86 or later to resolve the issue. As a temporary workaround, consider clearing the browser cache to minimize the risk of exploitation. Restrict access to potentially malicious sites to minimize the risk of phishing attacks.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾