CVE-2021-43533
Last modified
CVE-2021-43533 is a medium-severity vulnerability rated 4.3/10 on the CVSS scale. When parsing internationalized domain names, high bits of the characters in the URLs were sometimes stripped, resulting in inconsistencies that could lead to user confusion or attacks such as phishing. This vulnerability affects Firefox < 94.. EPSS estimates a 0.54% chance of exploitation in the next 30 days.
Description
When parsing internationalized domain names, high bits of the characters in the URLs were sometimes stripped, resulting in inconsistencies that could lead to user confusion or attacks such as phishing. This vulnerability affects Firefox < 94.
Metrics
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Mozilla | Firefox | < 94.0 |
References
- https://bugzilla.mozilla.org/show_bug.cgi?id=1724233Issue Tracking, Permissions Required, Vendor Advisory
- https://www.mozilla.org/security/advisories/mfsa2021-48/Vendor Advisory
- https://bugzilla.mozilla.org/show_bug.cgi?id=1724233Issue Tracking, Permissions Required, Vendor Advisory
- https://www.mozilla.org/security/advisories/mfsa2021-48/Vendor Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2021-43533?
How severe is CVE-2021-43533?
How do I fix CVE-2021-43533?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2021
- CVE-2021-43528Thunderbird unexpectedly enabled JavaScript in the compositi…6.5
- CVE-2021-43529Thunderbird versions prior to 91.3.0 are vulnerable to the h…9.8
- CVE-2021-4353The WooCommerce Dynamic Pricing and Discounts plugin for Wor…5.3
- CVE-2021-43530A Universal XSS vulnerability was present in Firefox for And…6.1
- CVE-2021-43531When a user loaded a Web Extensions context menu, the Web Ex…4.3
- CVE-2021-43532The 'Copy Image Link' context menu action would copy the fin…6.1
- CVE-2021-43534Mozilla developers and community members reported memory saf…8.8
- CVE-2021-43535A use-after-free could have occured when an HTTP2 session ob…8.8
- CVE-2021-43536Under certain circumstances, asynchronous functions could ha…6.5
- CVE-2021-43537An incorrect type conversion of sizes from 64bit to 32bit in…8.8
- CVE-2021-43538By misusing a race in our notification code, an attacker cou…4.3
- CVE-2021-43539Failure to correctly record the location of live pointers ac…8.8
Are you affected by CVE-2021-43533?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST