CVE-2021-23957 PUBLISHED

Reported by mozilla · Published February 26, 2021

Navigations through the Android-specific `intent` URL scheme could have been misused to escape iframe sandbox. Note: This issue only affected Firefox for Android. Other operating systems are unaffected. This vulnerability affects Firefox < 85.

Affected Products

VendorProductVersions
MozillaFirefox< 85
MozillaFirefox< 85

Timeline

References

Open in Interactive Console →