{"containers":{"cna":{"affected":[{"product":"Firefox ESR","vendor":"Mozilla","versions":[{"lessThan":"78.10","status":"affected","version":"unspecified","versionType":"custom"}]},{"product":"Thunderbird","vendor":"Mozilla","versions":[{"lessThan":"78.10","status":"affected","version":"unspecified","versionType":"custom"}]},{"product":"Firefox","vendor":"Mozilla","versions":[{"lessThan":"88","status":"affected","version":"unspecified","versionType":"custom"}]}],"descriptions":[{"lang":"en","value":"If a Blob URL was loaded through some unusual user interaction, it could have been loaded by the System Principal and granted additional privileges that should not be granted to web content. This vulnerability affects Firefox ESR < 78.10, Thunderbird < 78.10, and Firefox < 88."}],"problemTypes":[{"descriptions":[{"description":"Blob URLs may have been granted additional privileges","lang":"en","type":"text"}]}],"providerMetadata":{"dateUpdated":"2021-06-24T13:25:15.000Z","orgId":"f16b083a-5664-49f3-a51e-8d479e5ed7fe","shortName":"mozilla"},"references":[{"tags":["x_refsource_MISC"],"url":"https://www.mozilla.org/security/advisories/mfsa2021-14/"},{"tags":["x_refsource_MISC"],"url":"https://www.mozilla.org/security/advisories/mfsa2021-16/"},{"tags":["x_refsource_MISC"],"url":"https://www.mozilla.org/security/advisories/mfsa2021-15/"},{"tags":["x_refsource_MISC"],"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=1691153"}],"x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"security@mozilla.org","ID":"CVE-2021-23999","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"Firefox ESR","version":{"version_data":[{"version_affected":"<","version_value":"78.10"}]}},{"product_name":"Thunderbird","version":{"version_data":[{"version_affected":"<","version_value":"78.10"}]}},{"product_name":"Firefox","version":{"version_data":[{"version_affected":"<","version_value":"88"}]}}]},"vendor_name":"Mozilla"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"If a Blob URL was loaded through some unusual user interaction, it could have been loaded by the System Principal and granted additional privileges that should not be granted to web content. This vulnerability affects Firefox ESR < 78.10, Thunderbird < 78.10, and Firefox < 88."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"Blob URLs may have been granted additional privileges"}]}]},"references":{"reference_data":[{"name":"https://www.mozilla.org/security/advisories/mfsa2021-14/","refsource":"MISC","url":"https://www.mozilla.org/security/advisories/mfsa2021-14/"},{"name":"https://www.mozilla.org/security/advisories/mfsa2021-16/","refsource":"MISC","url":"https://www.mozilla.org/security/advisories/mfsa2021-16/"},{"name":"https://www.mozilla.org/security/advisories/mfsa2021-15/","refsource":"MISC","url":"https://www.mozilla.org/security/advisories/mfsa2021-15/"},{"name":"https://bugzilla.mozilla.org/show_bug.cgi?id=1691153","refsource":"MISC","url":"https://bugzilla.mozilla.org/show_bug.cgi?id=1691153"}]}}},"adp":[{"providerMetadata":{"orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE","dateUpdated":"2024-08-03T19:14:10.142Z"},"title":"CVE Program Container","references":[{"tags":["x_refsource_MISC","x_transferred"],"url":"https://www.mozilla.org/security/advisories/mfsa2021-14/"},{"tags":["x_refsource_MISC","x_transferred"],"url":"https://www.mozilla.org/security/advisories/mfsa2021-16/"},{"tags":["x_refsource_MISC","x_transferred"],"url":"https://www.mozilla.org/security/advisories/mfsa2021-15/"},{"tags":["x_refsource_MISC","x_transferred"],"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=1691153"}]}]},"cveMetadata":{"assignerOrgId":"f16b083a-5664-49f3-a51e-8d479e5ed7fe","assignerShortName":"mozilla","cveId":"CVE-2021-23999","datePublished":"2021-06-24T13:25:15.000Z","dateReserved":"2021-01-13T00:00:00.000Z","dateUpdated":"2024-08-03T19:14:10.142Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.1"}