Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-4rww-7vcv-43j8

Опубликовано: 01 мая 2022
Источник: github
Github: Не прошло ревью

Описание

Mozilla Firefox does not warn the user about HTTP elements on an HTTPS page when the HTTP elements are dynamically created by a delayed document.write, which allows remote attackers to supply unauthenticated content and conduct phishing attacks.

Mozilla Firefox does not warn the user about HTTP elements on an HTTPS page when the HTTP elements are dynamically created by a delayed document.write, which allows remote attackers to supply unauthenticated content and conduct phishing attacks.

EPSS

Процентиль: 50%
0.00273
Низкий

Связанные уязвимости

ubuntu
больше 18 лет назад

Mozilla Firefox does not warn the user about HTTP elements on an HTTPS page when the HTTP elements are dynamically created by a delayed document.write, which allows remote attackers to supply unauthenticated content and conduct phishing attacks.

nvd
больше 18 лет назад

Mozilla Firefox does not warn the user about HTTP elements on an HTTPS page when the HTTP elements are dynamically created by a delayed document.write, which allows remote attackers to supply unauthenticated content and conduct phishing attacks.

debian
больше 18 лет назад

Mozilla Firefox does not warn the user about HTTP elements on an HTTPS ...

EPSS

Процентиль: 50%
0.00273
Низкий