CVE-2021-23971

When processing a redirect with a conflicting Referrer-Policy, Firefox would have adopted the redirect's Referrer-Policy

published February 26, 2021

CVSS
—
EPSS
1%
Percentile
62.7
In the wild
Unconfirmed
What it is

When processing a redirect with a conflicting Referrer-Policy, Firefox would have adopted the redirect's Referrer-Policy. This would have potentially resulted in more information than intended by the original origin being provided to the destination of the redirect. This vulnerability affects Firefox < 86.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01007 · 62.7th percentile
Published
2021-02-26T01:55Z
EPSS history
Timeline
  • 26 FEB 01:55Z
    When processing a redirect with a conflicting Referrer-Policy, Firefox would have adopted the redirect's Referrer-Policy
    cvelistv5