CVE-2021-29958 Information disclosure in Firefox for iOS
Firefox for iOS failed to isolate private browsing cookies, allowing private session data to leak into normal browsing mode.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- A user has to click or open something
- Fix
- None listed
What is CVE-2021-29958?
CVE-2021-29958 is a medium-severity vulnerability in Mozilla Firefox, published on 24 Jun 2021. An attacker can exploit it over the internet without logging in, and only if a user opens a file or follows a link.
Official description
When a download was initiated, the client did not check whether it was in normal or private browsing mode, which led to private mode cookies being shared in normal browsing mode. This vulnerability affects Firefox for iOS < 34.
Weakness: CWE-862
Which versions are affected by CVE-2021-29958?
It affects 1 product.
Products include Mozilla Firefox.
How do I fix CVE-2021-29958?
No fix has been published for CVE-2021-29958 yet. Limit exposure of the affected software until one is available.
Is CVE-2021-29958 being exploited?
There is no known exploitation of CVE-2021-29958 in the wild and no public exploit code.
Other vulnerabilities in Mozilla Firefox
Sources
Also known as GHSA-5j3q-vmj5-h7fx.