CVE-2015-4498

The add-on installation feature in Mozilla Firefox before 40.0.3 and Firefox ESR 38.x before 38.2.1 allows remote attackers to bypass an intended…

published August 29, 2015

CVSS
—
EPSS
3%
Percentile
85.7
In the wild
Unconfirmed
What it is

The add-on installation feature in Mozilla Firefox before 40.0.3 and Firefox ESR 38.x before 38.2.1 allows remote attackers to bypass an intended user-confirmation requirement by constructing a crafted data: URL and triggering navigation to an arbitrary http: or https: URL at a certain early point in the installation process.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02678 · 85.7th percentile
Published
2015-08-29T19:00Z
EPSS history
Timeline
  • 29 AUG 19:00Z
    The add-on installation feature in Mozilla Firefox before 40.0.3 and Firefox ESR 38.x before 38.2.1 allows remote attackers to bypass an intended…
    cvelistv5