---

CVE-2021-23972 - log back

CVE-2021-23972 edited at 23 Feb 2021 18:48:28
Severity	- Unknown + Low
Remote	- Unknown + Remote
Type	- Unknown + Content spoofing
Description	+ A security issue was found in Firefox before version 86.0. One phishing tactic on the web is to provide a link with HTTP Auth. For example https://www.phishingtarget.com@evil.com. To mitigate this type of attack, Firefox will display a warning dialog; however, this warning dialog would not have been displayed if evil.com used a redirect that was cached by the browser.
References	+ https://www.mozilla.org/en-US/security/advisories/mfsa2021-07/#CVE-2021-23972 + https://bugzilla.mozilla.org/show_bug.cgi?id=1683536
Notes

CVE-2021-23972 created at 23 Feb 2021 18:42:31