{"vulnerability": "CVE-2021-2395", "sightings": [{"uuid": "074cbd04-763d-4b91-a644-2d858ae31fa1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2021-23956", "type": "seen", "source": "https://t.me/cibsecurity/24209", "content": "\u203c CVE-2021-23956 \u203c\n\nAn ambiguous file picker design could have confused users who intended to select and upload a single file into uploading a whole directory. This was addressed by adding a new prompt. This vulnerability affects Firefox < 85.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-02-26T07:38:45.000000Z"}, {"uuid": "e814d17a-95d9-4b0a-9885-a7a6f4bf76f8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2021-23953", "type": "seen", "source": "https://t.me/cibsecurity/24202", "content": "\u203c CVE-2021-23953 \u203c\n\nIf a user clicked into a specifically crafted PDF, the PDF reader could be confused into leaking cross-origin information, when said information is served as chunked data. This vulnerability affects Firefox < 85, Thunderbird < 78.7, and Firefox ESR < 78.7.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-02-26T07:38:35.000000Z"}, {"uuid": "27a8e845-40e7-4873-890e-041642f97a4f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2021-23959", "type": "seen", "source": "https://t.me/cibsecurity/24197", "content": "\u203c CVE-2021-23959 \u203c\n\nAn XSS bug in internal error pages could have led to various spoofing attacks, including other error pages and the address bar. Note: This issue only affected Firefox for Android. Other operating systems are unaffected. This vulnerability affects Firefox < 85.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-02-26T07:38:30.000000Z"}, {"uuid": "639ad5c1-3e50-4d05-a3cb-5ae031fb0be5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2021-23954", "type": "seen", "source": "https://t.me/cibsecurity/24194", "content": "\u203c CVE-2021-23954 \u203c\n\nUsing the new logical assignment operators in a JavaScript switch statement could have caused a type confusion, leading to a memory corruption and a potentially exploitable crash. This vulnerability affects Firefox < 85, Thunderbird < 78.7, and Firefox ESR < 78.7.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-02-26T07:38:27.000000Z"}]}