CVE-2017-5415

Publication date

2018-06-11 21:00:00

Family

mozilla

State

PUBLISHED

Description

An attack can use a blob URL and script to spoof an arbitrary addressbar URL prefaced by "blob:" as the protocol, leading to user confusion and further spoofing attacks. This vulnerability affects Firefox < 52.