← Database

CVE-2021-43540

MEDIUM CVSS: 6.5 Published: 2021-12-08 Modified: 2026-06-17

Description

WebExtensions with the correct permissions were able to create and install ServiceWorkers for third-party websites that would not have been uninstalled with the extension. This vulnerability affects Firefox < 95.

Affected Platforms

Mozilla Firefox

Weakness Type

NVD-CWE-noinfo

References