CVE-2021-29973

Name of the Vulnerable Software and Affected Versions Firefox for Android versions prior to 90

Description The issue is related to the password autofill feature in Firefox for Android, which was enabled without user interaction on insecure websites. This allowed potential unauthorized access to protected information due to insufficient access control. The problem has been corrected to require user interaction before autofill functionality enters a user's password.

Recommendations For Firefox for Android versions prior to 90, update to version 90 or later to resolve the issue. As a temporary workaround, consider disabling the password autofill feature until the update is applied. Restrict access to sensitive information when using Firefox for Android versions prior to 90 to minimize the risk of exploitation.