Register for the AI for Security Summit: Join Figma, Perplexity & Wiz

CVE-2021-23972
NixOS vulnerability analysis and mitigation

Overview

CVE-2021-23972 is a security vulnerability discovered in Firefox versions prior to 86 that involves HTTP Auth phishing warning bypass. The vulnerability was discovered by Vijay Tikudave and disclosed in February 2021. The issue affects Firefox's security feature that warns users about potential phishing attempts using HTTP Auth in URLs (Mozilla Advisory, NVD).

Technical details

The vulnerability occurs when a malicious URL containing HTTP Auth credentials is accessed (e.g., 'https://www.phishingtarget.com@evil.com'). Firefox normally displays a warning dialog to protect users from this phishing tactic. However, if the evil.com domain uses a redirect that is cached by the browser, the warning dialog would not be displayed, effectively bypassing this security measure. The issue was assigned a CVSS 3.1 base score of 8.8 (High) (Ubuntu CVE).

Impact

The vulnerability could allow attackers to conduct phishing attacks by bypassing Firefox's built-in security warning system. This could lead to users being redirected to malicious websites without receiving the intended security warning, potentially exposing them to credential theft and other phishing-related attacks (Mozilla Advisory).

Exploitability

The vulnerability requires user interaction and can be exploited by creating a specially crafted URL that includes HTTP Auth credentials followed by a malicious domain that implements cached redirects. The attack vector is through the network, with low attack complexity (Ubuntu CVE).

Mitigation and workarounds

The vulnerability was fixed in Firefox version 86. Users should upgrade to Firefox 86 or later to receive the security fix. The fix involves ensuring that the HTTP Auth warning prompt is displayed even when the response comes from the browser cache (Mozilla Bug).

Additional resources

Linux Distribution fix status

Fix availability across major Linux distributions and their releases.

Alpine

Fixed

edge

firefox: 87.0-r0

Fixed

v3.18

firefox: 87.0-r0

Fixed

v3.19

firefox: 87.0-r0

Fixed

v3.20

firefox: 87.0-r0

Fixed

v3.21

firefox: 87.0-r0

Fixed

v3.22

firefox: 87.0-r0

Fixed

v3.23

firefox: 87.0-r0

Fixed

Arch Linux

Fixed

rolling

firefox: 86.0-1

Fixed

SourceThis report was generated using AI

Related NixOS vulnerabilities:

CVE ID

Severity

Score

Technologies

Component name

CISA KEV exploit

Has fix

Published date

CVE-2026-91782LOW1.9
  • NixOS logoNixOS
  • binutils
NoYesSep 15, 2026
CVE-2026-91781LOW1.9
  • NixOS logoNixOS
  • binutils
NoYesSep 15, 2026
CVE-2026-91780LOW1.9
  • NixOS logoNixOS
  • binutils
NoNoSep 15, 2026
CVE-2026-91779LOW1.9
  • NixOS logoNixOS
  • binutils
NoNoSep 15, 2026
CVE-2026-90831LOW1.9
  • NixOS logoNixOS
  • seal-binutils
NoYesSep 14, 2026

Free Vulnerability Assessment

Benchmark your Cloud Security Posture

Evaluate your cloud security practices across 9 security domains to benchmark your risk level and identify gaps in your defenses.

Request assessment

Get a personalized demo

Ready to see Wiz in action?

"Best User Experience I have ever seen, provides full visibility to cloud workloads."
David EstlickCISO
"Wiz provides a single pane of glass to see what is going on in our cloud environments."
Adam FletcherChief Security Officer
"We know that if Wiz identifies something as critical, it actually is."
Greg PoniatowskiHead of Threat and Vulnerability Management