CVE-2021-43540

Publication date

2021-12-08 21:20:08

Family

mozilla

State

PUBLISHED

Description

WebExtensions with the correct permissions were able to create and install ServiceWorkers for third-party websites that would not have been uninstalled with the extension. This vulnerability affects Firefox < 95.