CVE-2021-23963

MEDIUM

Firefox < 85.0 - Permission State Reset via WebRTC Geolocation Sharing

Title source: llm

Description

When sharing geolocation during an active WebRTC share, Firefox could have reset the webRTC sharing state in the user interface, leading to loss of control over the currently granted permission. This vulnerability affects Firefox < 85.

References (2)

Core 2

Core References

Release Notes, Vendor Advisory x_refsource_misc

https://www.mozilla.org/security/advisories/mfsa2021-03/

Issue Tracking, Permissions Required, Vendor Advisory x_refsource_misc

https://bugzilla.mozilla.org/show_bug.cgi?id=1680793

Scores

CVSS v3 4.3

EPSS 0.0066

EPSS Percentile 46.4%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

Details

CWE

CWE-281

Status published

Products (1)

mozilla/firefox < 85.0

Published Feb 26, 2021

Tracked Since Feb 18, 2026