PT-2021-2996
CVE-2021-23996
·
Published
2021-04-19
·
Updated
2024-12-12
Description by
CVSS 3.1
10
CriticalMetricsAV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
Firefox versions prior to 88
Description
The issue is related to the use of 3D CSS in conjunction with Javascript, allowing content to be rendered outside the webpage's viewport. This could result in a spoofing attack, potentially used for phishing or other attacks on a user. The exploitation of this issue may enable a remote attacker to conduct spoofing attacks.
Recommendations
For versions prior to 88, update to version 88 or later to resolve the issue. As a temporary workaround, consider disabling the use of 3D CSS in conjunction with Javascript until a patch is available. Restrict access to potentially vulnerable web pages to minimize the risk of exploitation.
Found an issue in the description? Have something to add? Feel free to write us 👾