CVE-2015-7191

Mozilla Firefox before 42.0 on Android improperly restricts URL strings in intents, which allows attackers to conduct cross-site scripting (XSS) attacks via…

published November 5, 2015

CVSS
—
EPSS
1%
Percentile
73.3
In the wild
Unconfirmed
What it is

Mozilla Firefox before 42.0 on Android improperly restricts URL strings in intents, which allows attackers to conduct cross-site scripting (XSS) attacks via vectors involving an intent: URL and fallback navigation, aka "Universal XSS (UXSS)."

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01467 · 73.3th percentile
Published
2015-11-05T02:00Z
EPSS history
Timeline
  • 05 NOV 02:00Z
    Mozilla Firefox before 42.0 on Android improperly restricts URL strings in intents, which allows attackers to conduct cross-site scripting (XSS) attacks via…
    cvelistv5