CVE-2021-43532 Information disclosure in Firefox
Attackers can steal authentication tokens by tricking users into copying image links that expose redirected URLs containing sensitive credentials.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- A user has to click or open something
- Fix
- Available
What is CVE-2021-43532?
CVE-2021-43532 is a medium-severity vulnerability in Mozilla Firefox, published on 8 Dec 2021. An attacker can exploit it over the internet without logging in, and only if a user opens a file or follows a link.
Official description
The 'Copy Image Link' context menu action would copy the final image URL after redirects. By embedding an image that triggered authentication flows - in conjunction with a Content Security Policy that stopped a redirection chain in the middle - the final image URL could be one that contained an authentication token used to takeover a user account. If a website tricked a user into copy and pasting the image link back to the page, the page would be able to steal the authentication tokens. This was fixed by making the action return the original URL, before any redirects. This vulnerability affects Firefox < 94.
Weakness: CWE-601
Which versions are affected by CVE-2021-43532?
It affects 1 product.
Products include Mozilla Firefox.
How do I fix CVE-2021-43532?
Upgrade to a fixed version.
Is CVE-2021-43532 being exploited?
There is no known exploitation of CVE-2021-43532 in the wild and no public exploit code.
Other vulnerabilities in Mozilla Firefox
Sources
Also known as GHSA-x5xq-hf4g-4cgq.