CVE-2021-29978
CVE-2021-29978
Vexday Risk Score
3Low
SSVC decision (CISA)
Track
No exploitation signal → monitor
CVSS —EPSS 2.8%KEV nãoPoC —Nuclei —Metasploit —Patch —
Lifecycle
05 Aug 2021Published on NVD
Recommendation: Monitor — no exploitation signal at the moment.
Multiple low security issues were discovered and fixed in a security audit of Mozilla VPN 2.x branch as part of a 3rd party security audit. This vulnerability affects Mozilla VPN < 2.3.
Affected products
Mozilla · Mozilla VPNWant to know if your infrastructure is exposed to this?
Talk to TrueHacking →References
https://github.com/mozilla-mobile/mozilla-vpn-client/issues/797https://github.com/mozilla-mobile/mozilla-vpn-client/issues/798https://github.com/mozilla-mobile/mozilla-vpn-client/issues/799https://github.com/mozilla-mobile/mozilla-vpn-client/issues/800https://github.com/mozilla-mobile/mozilla-vpn-client/issues/801https://github.com/mozilla-mobile/mozilla-vpn-client/issues/803https://github.com/mozilla-mobile/mozilla-vpn-client/issues/804https://github.com/mozilla-mobile/mozilla-vpn-client/issues/805https://github.com/mozilla-mobile/mozilla-vpn-client/issues/806https://github.com/mozilla-mobile/mozilla-vpn-client/issues/808https://github.com/mozilla-mobile/mozilla-vpn-client/issues/809https://github.com/mozilla-mobile/mozilla-vpn-client/issues/810