CVE-2021-4138

Description

Improved Host header checks to reject requests not sent to a well-known local hostname or IP, or the server-specified hostname.

Affected products

• Mozilla / geckodriverunspecified – 0.30.0

References

• PATCHhttps://github.com/mozilla/geckodriver/releases/tag/v0.30.0
• MISChttps://bugzilla.mozilla.org/show_bug.cgi?id=1652612