CVE-2021-24001
MEDIUMMozilla Firefox < 88.0 - Exposure to Wrong Actor
Title source: ruleDescription
A compromised content process could have performed session history manipulations it should not have been able to due to testing infrastructure that was not restricted to testing-only configurations. This vulnerability affects Firefox < 88.
Scores
CVSS v3
4.3
EPSS
0.0027
EPSS Percentile
50.2%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
Classification
CWE
CWE-668
Status
published
Affected Products (1)
mozilla/firefox
< 88.0
Timeline
Published
Jun 24, 2021
Tracked Since
Feb 18, 2026