A "javascript:" url loaded by a malicious page can obfuscate its location by blanking the URL displayed in the addressbar, allowing for an malicious user to spoof an existing page without the malicious page's address being displayed correctly. This vulnerability affects Firefox < 52.
Vulnerable Product | Search on Vulmon | Subscribe to Product |
---|---|---|
mozilla firefox |