CVE-2017-7762

Description

When entered directly, Reader Mode did not strip the username and password section of URLs displayed in the addressbar. This can be used for spoofing the domain of the current page. This vulnerability affects Firefox < 54.

References

https://www.mozilla.org/security/advisories/mfsa2017-15/

https://bugzilla.mozilla.org/show_bug.cgi?id=1358248

https://access.redhat.com/errata/RHSA-2018:2113

https://access.redhat.com/errata/RHSA-2018:2112

http://www.securitytracker.com/id/1038689

http://www.securityfocus.com/bid/99047

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3