Description (CNA)
A "javascript:" url loaded by a malicious page can obfuscate its location by blanking the URL displayed in the addressbar, allowing for an attacker to spoof an existing page without the malicious page's address being displayed correctly. This vulnerability affects Firefox < 52.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Mozilla / Firefox | affected unspecified before 52 |
CWE
No CWE identifiers supplied.
References
- https://www.mozilla.org/security/advisories/mfsa2017-05/
- http://www.securitytracker.com/id/1037966
- https://bugzilla.mozilla.org/show_bug.cgi?id=1284395
- http://www.securityfocus.com/bid/96692
ADP enrichment
No English description supplied.