CVEvulnerability
CVE-2021-43533
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2021-12-08
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 4.3 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
Description
When parsing internationalized domain names, high bits of the characters in the URLs were sometimes stripped, resulting in inconsistencies that could lead to user confusion or attacks such as phishing. This vulnerability affects Firefox < 94.
Affected configurations
• mozilla firefox (< 94.0)
References
- https://bugzilla.mozilla.org/show_bug.cgi?id=1724233 Issue Tracking, Permissions Required, Vendor Advisory
- https://www.mozilla.org/security/advisories/mfsa2021-48/ Vendor Advisory
- https://bugzilla.mozilla.org/show_bug.cgi?id=1724233 Issue Tracking, Permissions Required, Vendor Advisory
- https://www.mozilla.org/security/advisories/mfsa2021-48/ Vendor Advisory