Vulnerabilities
Vulnerable Software

Vulnerability Details CVE-2014-1530

The docshell implementation in Mozilla Firefox before 29.0, Firefox ESR 24.x before 24.5, Thunderbird before 24.5, and SeaMonkey before 2.26 allows remote attackers to trigger the loading of a URL with a spoofed baseURI property, and conduct cross-site scripting (XSS) attacks, via a crafted web site that performs history navigation.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.008
EPSS Ranking 72.0%
CVSS Severity
CVSS v3 Score 6.1
CVSS v2 Score 4.3
References
Products affected by CVE-2014-1530


Contact Us

Shodan ® - All rights reserved