CVE:CVE-2021-43541
CNNVD:CNNVD-202112-541
Mozilla Firefox ESR是美国Mozilla基金会的Firefox(Web浏览器)的一个延长支持版本。
Mozilla Firefox ESR 存在安全漏洞，该漏洞源于。在为外部协议调用协议处理程序时，提供的包含空格的参数URL没有正确转义。此漏洞影响雷鸟< 91.4.0,Firefox ESR < 91.4.0和Firefox < 95。
solution:Upgrade mozilla firefox to a higher version than 95.0,and avoid the version (,95.0); Upgrade mozilla firefox_esr to a higher version than 91.4.0,and avoid the version (,91.4.0); Upgrade mozilla thunderbird to a higher version than 91.4.0,and avoid the version (,91.4.0); Upgrade debian debian_linux to a higher version than 9.0,10.0,11.0,and avoid the version 9.0,10.0,11.0