CVE-2017-5395 — Improper Input Validation in Mozilla Firefox
Severity
4.3MEDIUMNVD
EPSS
0.4%
top 40.82%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedJun 11
Latest updateDec 4
Description
Malicious sites can display a spoofed location bar on a subsequently loaded page when the existing location bar on the new page is scrolled out of view if navigations between pages can be timed correctly. Note: This issue only affects Firefox for Android. Other operating systems are not affected. This vulnerability affects Firefox < 51.
CVSS vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:NExploitability: 2.8 | Impact: 1.4
Affected Packages2 packages
🔴Vulnerability Details
1GHSA▶
GHSA-gjm7-37ww-4jrc: Malicious sites can display a spoofed location bar on a subsequently loaded page when the existing location bar on the new page is scrolled out of vie↗2022-05-14
📋Vendor Advisories
1Debian▶
CVE-2017-5395: firefox - Malicious sites can display a spoofed location bar on a subsequently loaded page...↗2017