<p>Upgrade <code>Debian:unstable</code> <code>firefox</code> to version 85.0-1 or higher.</p>

Improper Preservation of Permissions Affecting firefox package, versions <85.0-1

Snyk CVSS

Attack Complexity Low

User Interaction Required

Threat Intelligence

EPSS 0.08% (36^th percentile)

Do your applications use this vulnerable package?

In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.

Test your applications

Snyk ID SNYK-DEBIANUNSTABLE-FIREFOX-1065070
published 27 Jan 2021
disclosed 26 Feb 2021

Report a new vulnerability Found a mistake?

Introduced: 27 Jan 2021

CVE-2021-23963 Open this link in a new tab CWE-281 Open this link in a new tab

How to fix?

Upgrade Debian:unstable firefox to version 85.0-1 or higher.

NVD Description

Note: Versions mentioned in the description apply only to the upstream firefox package and not the firefox package as distributed by Debian. See How to fix? for Debian:unstable relevant fixed versions and status.

When sharing geolocation during an active WebRTC share, Firefox could have reset the webRTC sharing state in the user interface, leading to loss of control over the currently granted permission. This vulnerability affects Firefox < 85.