Mozilla Hubs Cloud vulnerabilities

2 vulnerabilities

Known vulnerabilities in Mozilla Hubs Cloud, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

9.8CVE-2021-29954mozillahubs_cloud+1
EPSS score
0.64%
Proxy functionality built into Hubs Cloud’s Reticulum software allowed access to internal URLs, including the metadata service. This vulnerability affects Hubs Cloud < mozillareality/reticulum/1.0.1/20210428201255.6.1CVE-2021-29979mozillahubs_cloud
EPSS score
0.67%
Hubs Cloud allows users to download shared content, specifically HTML and JS, which could allow javascript execution in the Hub Cloud instance’s primary hosting domain.*. This vulnerability affects Hubs Cloud < mozillareality/reticulum/1.0.1/20210618012634.