CVE-2017-5451 — Improper Input Validation in Mozilla Firefox
Severity
4.3MEDIUMNVD
OSV9.8
EPSS
0.6%
top 31.97%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedJun 11
Latest updateMay 14
Description
A mechanism to spoof the addressbar through the user interaction on the addressbar and the "onblur" event. The event could be used by script to affect text display to make the loaded site appear to be different from the one actually loaded within the addressbar. This vulnerability affects Thunderbird < 52.1, Firefox ESR < 52.1, and Firefox < 53.
CVSS vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:NExploitability: 2.8 | Impact: 1.4
Affected Packages10 packages
Also affects: Enterprise Linux 6.0, 7.0, 7.3, 7.4, 7.5
Patches
🔴Vulnerability Details
6📋Vendor Advisories
5Debian▶
CVE-2017-5451: firefox - A mechanism to spoof the addressbar through the user interaction on the addressb...↗2017