Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-8qrw-9ppf-58qg

Опубликовано: 14 мая 2022
Источник: github
Github: Не прошло ревью
CVSS3: 6.5

Описание

When the text of a specially formatted URL is dragged to the addressbar from page content, the displayed URL can be spoofed to show a different site than the one loaded. This allows for phishing attacks where a malicious page can spoof the identify of another site. This vulnerability affects Firefox < 58.

When the text of a specially formatted URL is dragged to the addressbar from page content, the displayed URL can be spoofed to show a different site than the one loaded. This allows for phishing attacks where a malicious page can spoof the identify of another site. This vulnerability affects Firefox < 58.

EPSS

Процентиль: 73%
0.00781
Низкий

6.5 Medium

CVSS3

Дефекты

CWE-20

Связанные уязвимости

CVSS3: 6.5
ubuntu
больше 7 лет назад

When the text of a specially formatted URL is dragged to the addressbar from page content, the displayed URL can be spoofed to show a different site than the one loaded. This allows for phishing attacks where a malicious page can spoof the identify of another site. This vulnerability affects Firefox < 58.

CVSS3: 6.5
nvd
больше 7 лет назад

When the text of a specially formatted URL is dragged to the addressbar from page content, the displayed URL can be spoofed to show a different site than the one loaded. This allows for phishing attacks where a malicious page can spoof the identify of another site. This vulnerability affects Firefox < 58.

CVSS3: 6.5
debian
больше 7 лет назад

When the text of a specially formatted URL is dragged to the addressba ...

CVSS3: 6.5
fstec
около 9 лет назад

Уязвимость браузера Mozilla Firefox, связанная с недостаточной проверкой URI-адреса при его «перетаскивании» в адресную строку браузера из содержимого текущей страницы, позволяющая нарушителю проводить фишинг-атаки

EPSS

Процентиль: 73%
0.00781
Низкий

6.5 Medium

CVSS3

Дефекты

CWE-20