CVE-2015-7211

Mozilla Firefox before 43.0 mishandles the # (number sign) character in a data: URI, which allows remote attackers to spoof web sites via unspecified vectors

published December 16, 2015

CVSS
—
EPSS
3%
Percentile
84.8
In the wild
Unconfirmed
What it is

Mozilla Firefox before 43.0 mishandles the # (number sign) character in a data: URI, which allows remote attackers to spoof web sites via unspecified vectors.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02543 · 84.8th percentile
Published
2015-12-16T11:00Z
EPSS history
Timeline
  • 16 DEC 11:00Z
    Mozilla Firefox before 43.0 mishandles the # (number sign) character in a data: URI, which allows remote attackers to spoof web sites via unspecified vectors
    cvelistv5