CVE-2017-5420
MEDIUM 6.5EPSS 1.3%
A "javascript:" url loaded by a malicious page can obfuscate its location by blanking the URL displayed in the addressbar, allowing for an attacker to spoof an existing page without the malicious page's address being displayed correctly. This vulnerability affects Firefox < 52.
- Affected
- Mozilla · Firefox
- CVSS v3.0 NVD
- 6.5 MEDIUM
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N - CVSS v2.0 NVD
- 4.3 MEDIUM
AV:N/AC:M/Au:N/C:N/I:P/A:N - EPSS
- 1.25% chance of exploitation in the next 30 days, 69th percentile
- Published
- 2018-06-11
- Updated
- 2024-08-05
Proof-of-concept exploits (1)
Security advisories
- https://www.mozilla.org/security/advisories/mfsa2017-05
- http://www.securityfocus.com/bid/96692
- http://www.securitytracker.com/id/1037966