CVE-2021-4138

Description

Improved Host header checks to reject requests not sent to a well-known local hostname or IP, or the server-specified hostname.

Affected Platforms

Weakness Type

NVD-CWE-noinfo

References

• https://bugzilla.mozilla.org/show_bug.cgi?id=1652612
• https://github.com/mozilla/geckodriver/releases/tag/v0.30.0
• https://bugzilla.mozilla.org/show_bug.cgi?id=1652612
• https://github.com/mozilla/geckodriver/releases/tag/v0.30.0