CVE-2017-5420

medium

Description

A "javascript:" url loaded by a malicious page can obfuscate its location by blanking the URL displayed in the addressbar, allowing for an attacker to spoof an existing page without the malicious page's address being displayed correctly. This vulnerability affects Firefox < 52.

References

https://www.mozilla.org/security/advisories/mfsa2017-05/

https://bugzilla.mozilla.org/show_bug.cgi?id=1284395

http://www.securitytracker.com/id/1037966

http://www.securityfocus.com/bid/96692

Details

Source: Mitre, NVD

Published: 2018-06-11

Updated: 2018-08-07

Risk Information

CVSS v2

Base Score: 4.3

Vector: CVSS2#AV:N/AC:M/Au:N/C:N/I:P/A:N

Severity: Medium

CVSS v3

Base Score: 6.5

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

Severity: Medium