CVE-2021-38491

repository/definitions/vulnerability/oval_com.gfi_def_1486.xml

@@ -0,0 +1,33 @@
+<definition xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" id="oval:com.gfi:def:1486" version="0" class="vulnerability">
+  <metadata>
+    <title>Mixed-content checks were unable to analyze opaque origins which led to some mixed content being loaded.</title>
+    <affected family="windows">
+      <platform>Microsoft Windows 7</platform>
+      <platform>Microsoft Windows 8</platform>
+      <platform>Microsoft Windows 8.1</platform>
+      <platform>Microsoft Windows 10</platform>
+      <platform>Microsoft Windows Server 2008</platform>
+      <platform>Microsoft Windows Server 2008 R2</platform>
+      <platform>Microsoft Windows Server 2012</platform>
+      <platform>Microsoft Windows Server 2012 R2</platform>
+      <platform>Microsoft Windows Server 2016</platform>
+      <platform>Microsoft Windows Server 2019</platform>
+      <product>Mozilla Firefox</product>
+    </affected>
+    <reference ref_id="CVE-2021-38491" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-38491" source="CVE"/>
+    <description>Mixed-content checks were unable to analyze opaque origins which led to some mixed content being loaded. This vulnerability affects Firefox &lt; 92.</description>
+    <oval_repository>
+      <dates>
+        <submitted date="2021-11-08T07:44:00+00:00">
+          <contributor organization="GFI">Glenn Lugod</contributor>
+        </submitted>
+      </dates>
+      <status>INITIAL SUBMISSION</status>
+      <min_schema_version>5.10</min_schema_version>
+    </oval_repository>
+  </metadata>
+  <criteria comment="Mozilla Firefox Mainline release is installed + version" operator="AND">
+    <extend_definition comment="Mozilla Firefox Mainline release is installed" definition_ref="oval:org.mitre.oval:def:22259"/>
+    <criterion comment="Check if Mozilla Firefox Mainline version less than 92.0" test_ref="oval:com.gfi:tst:1487"/>
+  </criteria>
+</definition>

repository/states/windows/file_state/1000/oval_com.gfi_ste_1488.xml

@@ -0,0 +1,3 @@
+<file_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" comment="State matches version less than 92.0" id="oval:com.gfi:ste:1488" version="0">
+  <product_version datatype="version" operation="less than">92.0</product_version>
+</file_state>

repository/tests/windows/file_test/1000/oval_com.gfi_tst_1487.xml

@@ -0,0 +1,4 @@
+<file_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" check="all" check_existence="at_least_one_exists" comment="Check if Mozilla Firefox Mainline version less than 92.0" id="oval:com.gfi:tst:1487" version="0">
+  <object object_ref="oval:org.mitre.oval:obj:30321"/>
+  <state state_ref="oval:com.gfi:ste:1488"/>
+</file_test>