Detections
Analytics

CVE-2017-7762

high

Description

When entered directly, Reader Mode did not strip the username and password section of URLs displayed in the addressbar. This can be used for spoofing the domain of the current page. This vulnerability affects Firefox < 54.

References

https://access.redhat.com/errata/RHSA-2018:2113

https://access.redhat.com/errata/RHSA-2018:2112

http://www.securitytracker.com/id/1038689

http://www.securityfocus.com/bid/99047

https://www.mozilla.org/security/advisories/mfsa2017-15/

https://bugzilla.mozilla.org/show_bug.cgi?id=1358248

Details

Source: Mitre, NVD

Published: 2018-06-11

Updated: 2024-11-21

Risk Information

CVSS v2

Base Score: 5

Vector: CVSS2#AV:N/AC:L/Au:N/C:N/I:P/A:N

Severity: Medium

CVSS v3

Base Score: 7.5

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Severity: High

EPSS

EPSS: 0.0073