PT-2021-2996

CVE-2021-23996

·

Published

2021-04-19

·

Updated

2024-12-12

Description by

CVSS 3.1
10
Critical
MetricsAV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Firefox versions prior to 88
Description The issue is related to the use of 3D CSS in conjunction with Javascript, allowing content to be rendered outside the webpage's viewport. This could result in a spoofing attack, potentially used for phishing or other attacks on a user. The exploitation of this issue may enable a remote attacker to conduct spoofing attacks.
Recommendations For versions prior to 88, update to version 88 or later to resolve the issue. As a temporary workaround, consider disabling the use of 3D CSS in conjunction with Javascript until a patch is available. Restrict access to potentially vulnerable web pages to minimize the risk of exploitation.
Exploitability
Exploit
Fix
Researchers
Vendors
Affected products
Weakness enumeration
Related identifiers
ALT-PU-2021-1676
ALT-PU-2021-2725
ALT-PU-2021-2881
ALT-PU-2021-3368
ALT-PU-2021-3369
ALT-PU-2022-1781
ALT-PU-2022-1782
OESA-2023-1673
OESA-2023-1674
OPENSUSE-SU-2024:10600-1
OPENSUSE-SU-2024:14572-1
USN-4926-1
Found an issue in the description? Have something to add? Feel free to write us 👾