CVE-2021-43531

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 94

Description The issue is related to a same-origin-violation in the context of Web Extensions, where a Web Extension could access the post-redirect URL of an element clicked, potentially leaking data it should not have access to. This was due to a lack of the WebRequest permission for the hosts involved in the redirect. The problem has been fixed to provide the pre-redirect URL instead.

Recommendations For Firefox versions prior to 94, update to version 94 or later to resolve the issue.