Vulnerabilities > CVE-2021-23974 - Unspecified vulnerability in Mozilla Firefox

047910
CVSS 6.1 - MEDIUM
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
LOW
Integrity impact
LOW
Availability impact
NONE
network
low complexity
mozilla
NVD
Published: 2021-02-26
Updated: 2022-05-23

Summary

The DOMParser API did not properly process '<noscript>' elements for escaping. This could be used as an mXSS vector to bypass an HTML Sanitizer. This vulnerability affects Firefox < 86.

Vulnerable Configurations

Part Description Count
Application
Mozilla
701

References