CVE-2021-29979

MediumCVSS 6.1/10Last modified Jun 17, 2026

Description

Hubs Cloud allows users to download shared content, specifically HTML and JS, which could allow javascript execution in the Hub Cloud instance’s primary hosting domain.*. This vulnerability affects Hubs Cloud < mozillareality/reticulum/1.0.1/20210618012634.

Metrics

CVSS 3.1 6.1/10CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Weakness enumeration

CWE-79

Affected software

No affected versions have been published.

Timeline

Published
Aug 2, 2021
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2021

CVE-2021-299808.8Uninitialized memory in a canvas object could have caused an incorrect free() leading to memory corruption and a potentially exploitable craCVE-2021-299818.8An issue present in lowering/register allocation could have led to obscure but deterministic register confusion failures in JITted code thatCVE-2021-299826.5Due to incorrect JIT optimization, we incorrectly interpreted data from the wrong type of object, resulting in the potential leak of a singlCVE-2021-299836.5Firefox for Android could get stuck in fullscreen mode and not exit it even after normal interactions that should cause it to exit. *Note: TCVE-2021-299848.8Instruction reordering resulted in a sequence of instructions that would cause an object to be incorrectly considered during garbage collectCVE-2021-299858.8A use-after-free vulnerability in media channels could have led to memory corruption and a potentially exploitable crash. This vulnerabilityCVE-2021-299868.1A suspected race condition when calling getaddrinfo led to memory corruption and a potentially exploitable crash. *Note: This issue only affCVE-2021-299876.5After requesting multiple permissions, and closing the first permission panel, subsequent permission panels will be displayed in a differentCVE-2021-299888.8Firefox incorrectly treated an inline list-item element as a block element, resulting in an out of bounds read or memory corruption, and a pCVE-2021-299898.8Mozilla developers reported memory safety bugs present in Firefox 90 and Firefox ESR 78.12. Some of these bugs showed evidence of memory corCVE-2021-299908.8Mozilla developers and community members reported memory safety bugs present in Firefox 90. Some of these bugs showed evidence of memory corCVE-2021-299918.1Firefox incorrectly accepted a newline in a HTTP/3 header, interpretting it as two separate headers. This allowed for a header splitting att