---

CVE-2021-38497 - log back

CVE-2021-38497 edited at 12 Oct 2021 14:42:56
References	https://www.mozilla.org/security/advisories/mfsa2021-43/ + https://www.mozilla.org/security/advisories/mfsa2021-47/ https://bugzilla.mozilla.org/show_bug.cgi?id=1726621

CVE-2021-38497 created at 05 Oct 2021 13:06:06
Severity	+ Medium
Remote	+ Remote
Type	+ Content spoofing
Description	+ Through use of reportValidity() and window.open(), a plain-text validation message could have been overlaid on another origin, leading to possible user confusion and spoofing attacks.
References	+ https://www.mozilla.org/security/advisories/mfsa2021-43/ + https://bugzilla.mozilla.org/show_bug.cgi?id=1726621
Notes