Vulnerabilities > CVE-2021-23974 - Unspecified vulnerability in Mozilla Firefox

047910
CVSS 4.3 - MEDIUM
Attack vector
NETWORK
Attack complexity
MEDIUM
Privileges required
NONE
Confidentiality impact
NONE
Integrity impact
PARTIAL
Availability impact
NONE
network
mozilla
NVD
Published: 2021-02-26
Updated: 2022-05-23

Summary

The DOMParser API did not properly process '<noscript>' elements for escaping. This could be used as an mXSS vector to bypass an HTML Sanitizer. This vulnerability affects Firefox < 86.

Vulnerable Configurations

Part Description Count
Application
Mozilla
517

References