CVE:CVE-2021-43543
CNNVD:CNNVD-202112-542
Mozilla Firefox是美国Mozilla基金会的一款开源Web浏览器。
Mozilla Firefox ESR存在跨站脚本漏洞，该漏洞源于使用CSP沙箱指令加载的文档可以通过嵌入额外的内容来逃避沙箱的脚本限制。此漏洞影响雷鸟< 91.4.0,Firefox ESR < 91.4.0和Firefox < 95。
solution:Upgrade mozilla firefox to a higher version than 95.0,and avoid the version (,95.0); Upgrade mozilla firefox_esr to a higher version than 91.4.0,and avoid the version (,91.4.0); Upgrade mozilla thunderbird to a higher version than 91.4.0,and avoid the version (,91.4.0); Upgrade debian debian_linux to a higher version than 9.0,10.0,11.0,and avoid the version 9.0,10.0,11.0