| Severity |
|
| Remote |
|
| Type |
| - |
Unknown |
| + |
Information disclosure |
|
| Description |
| + |
A malicious website that causes an HTTP Authentication dialog to be spawned could trick the built-in password manager to suggest passwords for the currently active website instead of the website that triggered the dialog. |
| + |
|
| + |
This bug only affects Firefox for Android. Other operating systems are unaffected. This vulnerability affects Firefox < 89. |
|
| References |
| + |
https://www.mozilla.org/security/advisories/mfsa2021-23/ |
| + |
https://bugzilla.mozilla.org/show_bug.cgi?id=1709257 |
|