Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2007-1970

Опубликовано: 11 апр. 2007
Источник: nvd
CVSS2: 5
EPSS Низкий

Описание

Mozilla Firefox does not warn the user about HTTP elements on an HTTPS page when the HTTP elements are dynamically created by a delayed document.write, which allows remote attackers to supply unauthenticated content and conduct phishing attacks.

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*

EPSS

Процентиль: 56%
0.00333
Низкий

5 Medium

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

ubuntu
почти 19 лет назад

Mozilla Firefox does not warn the user about HTTP elements on an HTTPS page when the HTTP elements are dynamically created by a delayed document.write, which allows remote attackers to supply unauthenticated content and conduct phishing attacks.

debian
почти 19 лет назад

Mozilla Firefox does not warn the user about HTTP elements on an HTTPS ...

github
почти 4 года назад

Mozilla Firefox does not warn the user about HTTP elements on an HTTPS page when the HTTP elements are dynamically created by a delayed document.write, which allows remote attackers to supply unauthenticated content and conduct phishing attacks.

EPSS

Процентиль: 56%
0.00333
Низкий

5 Medium

CVSS2

Дефекты

NVD-CWE-Other