CVEvulnerability
CVE-2017-5417
5.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2018-06-11
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.0 ([email protected])
- 5.3 MEDIUM — CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
- CVSS 2.0 ([email protected])
- 5.0 MEDIUM — AV:N/AC:L/Au:N/C:N/I:P/A:N
- Weaknesses
- CWE-20
Description
When dragging content from the primary browser pane to the addressbar on a malicious site, it is possible to change the addressbar so that the displayed location following navigation does not match the URL of the newly loaded page. This allows for spoofing attacks. This vulnerability affects Firefox < 52.
Affected configurations
• mozilla firefox (< 52.0)
Related
Weakness · CWE (1)
- CWE-20 Improper Input Validation weakness
References
- http://www.securityfocus.com/bid/96692 Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1037966 Third Party Advisory, VDB Entry
- https://bugzilla.mozilla.org/show_bug.cgi?id=791597 Issue Tracking, Patch, Vendor Advisory
- https://www.mozilla.org/security/advisories/mfsa2017-05/ Vendor Advisory
- http://www.securityfocus.com/bid/96692 Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1037966 Third Party Advisory, VDB Entry
- https://bugzilla.mozilla.org/show_bug.cgi?id=791597 Issue Tracking, Patch, Vendor Advisory
- https://www.mozilla.org/security/advisories/mfsa2017-05/ Vendor Advisory