CVE-2018-12382

The displayed addressbar URL can be spoofed on Firefox for Android using a javascript: URI in concert with JavaScript to insert text before the loaded domain…

published October 18, 2018

CVSS
—
EPSS
2%
Percentile
76.8
In the wild
Unconfirmed
What it is

The displayed addressbar URL can be spoofed on Firefox for Android using a javascript: URI in concert with JavaScript to insert text before the loaded domain name, scrolling the loaded domain out of view to the right. This can lead to user confusion. *This vulnerability only affects Firefox for Android < 62.*

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01681 · 76.8th percentile
Published
2018-10-18T13:00Z
EPSS history
Timeline
  • 18 OCT 13:00Z
    The displayed addressbar URL can be spoofed on Firefox for Android using a javascript: URI in concert with JavaScript to insert text before the loaded domain…
    cvelistv5