CVE-2021-29973

Password autofill was enabled without user interaction on insecure websites on Firefox for Android

published August 5, 2021

CVSS
—
EPSS
1%
Percentile
56.5
In the wild
Unconfirmed
What it is

Password autofill was enabled without user interaction on insecure websites on Firefox for Android. This was corrected to require user interaction with the page before a user's password would be entered by the browser's autofill functionality *This bug only affects Firefox for Android. Other operating systems are unaffected.*. This vulnerability affects Firefox < 90.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00812 · 56.5th percentile
Published
2021-08-05T19:46Z
EPSS history
Timeline
  • 05 AUG 19:46Z
    Password autofill was enabled without user interaction on insecure websites on Firefox for Android
    cvelistv5