CVE-2021-23984 log

Source	CVE Red Hat MITRE NVD Debian Ubuntu SUSE Alpine Mageia CVE Details CIRCL Bugs Arch Linux Red Hat Gentoo SUSE GitHub Lists oss-security full-disclosure bugtraq Misc GitHub code web search
Severity	Medium
Remote	Yes
Type	Content spoofing
Description	A security issue was found in Firefox before version 87 and Thunderbird before version 78.9. A malicious extension could have opened a popup window lacking an address bar. The title of the popup lacking an address bar should not be fully controllable, but in this situation was. This could have been used to spoof a website and attempt to trick the user into providing credentials.

Group	Package	Affected	Fixed	Severity	Status	Ticket
AVG-1729	thunderbird	78.8.1-1	78.9.0-1	High	Fixed
AVG-1728	firefox	86.0.1-1	87.0-1	High	Fixed

References
https://www.mozilla.org/en-US/security/advisories/mfsa2021-10/#CVE-2021-23984 https://www.mozilla.org/en-US/security/advisories/mfsa2021-12/#CVE-2021-23984 https://bugzilla.mozilla.org/show_bug.cgi?id=1693664

References

https://www.mozilla.org/en-US/security/advisories/mfsa2021-10/#CVE-2021-23984
https://www.mozilla.org/en-US/security/advisories/mfsa2021-12/#CVE-2021-23984
https://bugzilla.mozilla.org/show_bug.cgi?id=1693664