CVE-2004-1381
Firefox before 1.0 and Mozilla before 1.7.5 allow inactive (background) tabs to focus on input...
CVE-2004-1381 is a medium vulnerability (CVSS 5.0) in Mozilla Firefox, published October 20, 2004. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 6.88%, the 94th percentile. No source names a fixed version.
- Severity
- 5.0 MediumCVSS 2.0, NVD
- Exploit chance
- 6.88%EPSS, 94th percentile
- Exploitation
- None known1 public exploit
- Fixed in
- No fix listedNo source names one
Description
Firefox before 1.0 and Mozilla before 1.7.5 allow inactive (background) tabs to focus on input being entered in the active tab, as originally reported using form fields, which allows remote attackers to steal sensitive data that is intended for other sites, which could facilitate phishing attacks.
Exploit likelihood
Affected products
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| Exploit-DB | Multiple Browsers - Tabbed Browsing | 2004-10-22 |
What each source reports
NVD Score used
Firefox before 1.0 and Mozilla before 1.7.5 allow inactive (background) tabs to focus on input being entered in the active tab, as originally reported using form fields, which allows remote attackers to steal sensitive data that is intended for other sites, which could facilitate phishing attacks.
- Record
CVE-2004-1381- CVSS 2.0
- 5.0 Medium
AV:N/AC:L/Au:N/C:P/I:N/A:N - Updated
- 2026-11-02
CVE ListNo score
Firefox before 1.0 and Mozilla before 1.7.5 allow inactive (background) tabs to focus on input being entered in the active tab, as originally reported using form fields, which allows remote attackers to steal sensitive data that is intended for other sites, which could facilitate phishing attacks.
- Record
CVE-2004-1381- Updated
- 2026-11-02
EUVDEUVD-2004-1378No score
Firefox before 1.0 and Mozilla before 1.7.5 allow inactive (background) tabs to focus on input being entered in the active tab, as originally reported using form fields, which allows remote attackers to steal sensitive data that is intended for other sites, which could facilitate phishing attacks.
- Record
EUVD-2004-1378- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-hhqx-qfww-wwhcNo score
Firefox before 1.0 and Mozilla before 1.7.5 allow inactive (background) tabs to focus on input...
Firefox before 1.0 and Mozilla before 1.7.5 allow inactive (background) tabs to focus on input being entered in the active tab, as originally reported using form fields, which allows remote attackers to steal sensitive data that is intended for other sites, which could facilitate phishing attacks.
- Record
GHSA-hhqx-qfww-wwhc- Updated
- 2026-11-02
History
| Recorded | Changed | Sources |
|---|---|---|
| facts | ||
| aliases | EUVD | |
| first indexed | CVE List, Exploit-DB, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
References
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100053
mozilla.org/security/announce/mfsa2005-05.html
exchange.xforce.ibmcloud.com/vulnerabilities/17789
secunia.com/multiple_browsers_form_field_focus_test
nvd.nist.gov/vuln/detail/CVE-2004-1381
github.com/advisories/GHSA-hhqx-qfww-wwhc