Skip to content
OpenAdvisories
Unscored CVE-2021-38491 EUVD-2021-24943GHSA-x4p9-6wvp-vc8f

Mixed-content checks were unable to analyze opaque origins which led to some mixed content being loaded. This vulnerability affects Firefox…

Published Nov 3, 2021 · Updated Aug 4, 2024 · Assigned by mozilla

Description

Mixed-content checks were unable to analyze opaque origins which led to some mixed content being loaded. This vulnerability affects Firefox < 92.

Affected products

VendorProductAffectedFixed
Mozilla Firefox unspecified – < 92 92

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

ReleasePackageFixed inAdvisory
Ubuntu 22.04 LTS mozjs78 No fix yet —
Ubuntu 20.04 LTS firefox 92.0+build3-0ubuntu0.20.04.1 USN-5074-1
Ubuntu 20.04 LTS mozjs52 +1 No fix yet —
Ubuntu 18.04 LTS firefox 92.0+build3-0ubuntu0.18.04.1 USN-5074-1
Ubuntu 18.04 LTS mozjs38 +1 No fix yet —
ReleasePackageFixed inAdvisory
openSUSE Tumbleweed MozillaFirefox 92.0-1.2 openSUSE-SU-2024:10600-1
openSUSE Tumbleweed firefox-esr 128.5.1-1.1 openSUSE-SU-2024:14572-1
ReleasePackageFixed inAdvisory
Alpine v3.24 librewolf 92.0.1-r0 —
Alpine v3.23 firefox +1 92.0.1-r0 —
Alpine v3.22 firefox +1 92.0.1-r0 —
Alpine v3.21 firefox +1 92.0.1-r0 —
Alpine v3.20 firefox 92.0.1-r0 —
Show 5 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
Alpine v3.19 firefox 92.0.1-r0 —
Alpine v3.18 firefox 92.0.1-r0 —
Alpine v3.17 firefox 92.0.1-r0 —
Alpine v3.16 firefox 92.0.1-r0 —
Alpine v3.15 firefox 92.0.1-r0 —

Advisories 3

References