{"id":"CVE-2017-7762","aliases":["EUVD-2017-16737","GHSA-7g8j-7wv5-6f7h","RHSA-2018:2112","RHSA-2018:2113","UBUNTU-CVE-2017-7762","USN-3315-1"],"status":"published","title":"When entered directly, Reader Mode did not strip the username and password section of URLs...","description":"When entered directly, Reader Mode did not strip the username and password section of URLs displayed in the addressbar. This can be used for spoofing the domain of the current page. This vulnerability affects Firefox \u003c 54.","severity":{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.01881,"percentile":0.79607,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-20"],"published":"2017-06-14T00:00:00Z","modified":"2026-06-28T10:25:29Z","fixes":[{"ecosystem":"Ubuntu:14.04:LTS","package":"firefox","fixed_in":["54.0+build3-0ubuntu0.14.04.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:16.04:LTS","package":"firefox","fixed_in":["54.0+build3-0ubuntu0.16.04.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:60.1.0-5.el6"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"firefox-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:60.1.0-5.el6"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:60.1.0-5.el6"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"firefox-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:60.1.0-5.el6"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:60.1.0-5.el6"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"firefox-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:60.1.0-5.el6"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:60.1.0-5.el6"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"firefox-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:60.1.0-5.el6"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:60.1.0-4.el7_5"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"firefox-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:60.1.0-4.el7_5"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:60.1.0-4.el7_5"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"firefox-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:60.1.0-4.el7_5"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:60.1.0-4.el7_5"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"firefox-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:60.1.0-4.el7_5"}]}],"bundled":11},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"54.0+build3-0ubuntu0.14.04.1"}]}],"versions":["24.0+build1-0ubuntu1","25.0+build3-0ubuntu0.13.10.1","28.0~b2+build1-0ubuntu2","28.0+build1-0ubuntu1","28.0+build2-0ubuntu1","28.0+build2-0ubuntu2","29.0+build1-0ubuntu0.14.04.2","30.0+build1-0ubuntu0.14.04.3","31.0+build1-0ubuntu0.14.04.1","32.0+build1-0ubuntu0.14.04.1","32.0.3+build1-0ubuntu0.14.04.1","33.0+build2-0ubuntu0.14.04.1","34.0+build2-0ubuntu0.14.04.1","35.0+build3-0ubuntu0.14.04.2","35.0.1+build1-0ubuntu0.14.04.1","36.0+build2-0ubuntu0.14.04.4","36.0.1+build2-0ubuntu0.14.04.1","36.0.4+build1-0ubuntu0.14.04.1","37.0+build2-0ubuntu0.14.04.1","37.0.1+build1-0ubuntu0.14.04.1","37.0.2+build1-0ubuntu0.14.04.1","38.0+build3-0ubuntu0.14.04.1","39.0+build5-0ubuntu0.14.04.1","39.0.3+build2-0ubuntu0.14.04.1","40.0+build4-0ubuntu0.14.04.1","40.0+build4-0ubuntu0.14.04.4","40.0.3+build1-0ubuntu0.14.04.1","41.0+build3-0ubuntu0.14.04.1","41.0.1+build2-0ubuntu0.14.04.1","41.0.2+build2-0ubuntu0.14.04.1","42.0+build2-0ubuntu0.14.04.1","43.0+build1-0ubuntu0.14.04.1","43.0.4+build3-0ubuntu0.14.04.1","44.0+build3-0ubuntu0.14.04.1","44.0.1+build2-0ubuntu0.14.04.1","44.0.2+build1-0ubuntu0.14.04.1","45.0+build2-0ubuntu0.14.04.1","45.0.1+build1-0ubuntu0.14.04.2","45.0.2+build1-0ubuntu0.14.04.1","46.0+build5-0ubuntu0.14.04.2","46.0.1+build1-0ubuntu0.14.04.3","47.0+build3-0ubuntu0.14.04.1","48.0+build2-0ubuntu0.14.04.1","49.0+build4-0ubuntu0.14.04.1","49.0.2+build2-0ubuntu0.14.04.1","50.0+build2-0ubuntu0.14.04.2","50.0.2+build1-0ubuntu0.14.04.1","50.1.0+build2-0ubuntu0.14.04.1","51.0.1+build2-0ubuntu0.14.04.1","51.0.1+build2-0ubuntu0.14.04.2","52.0+build2-0ubuntu0.14.04.1","52.0.1+build2-0ubuntu0.14.04.1","52.0.2+build1-0ubuntu0.14.04.1","53.0+build6-0ubuntu0.14.04.1","53.0.2+build1-0ubuntu0.14.04.2","53.0.3+build1-0ubuntu0.14.04.2"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"54.0+build3-0ubuntu0.16.04.1"}]}],"versions":["41.0.2+build2-0ubuntu1","42.0+build2-0ubuntu1","44.0+build3-0ubuntu2","44.0.1+build1-0ubuntu1","44.0.2+build1-0ubuntu1","45.0+build2-0ubuntu1","45.0.1+build1-0ubuntu1","45.0.2+build1-0ubuntu1","46.0+build5-0ubuntu0.16.04.2","46.0.1+build1-0ubuntu0.16.04.2","47.0+build3-0ubuntu0.16.04.1","48.0+build2-0ubuntu0.16.04.1","49.0+build4-0ubuntu0.16.04.1","49.0.2+build2-0ubuntu0.16.04.2","50.0+build2-0ubuntu0.16.04.2","50.0.2+build1-0ubuntu0.16.04.1","50.1.0+build2-0ubuntu0.16.04.1","51.0.1+build2-0ubuntu0.16.04.1","51.0.1+build2-0ubuntu0.16.04.2","52.0+build2-0ubuntu0.16.04.1","52.0.1+build2-0ubuntu0.16.04.1","52.0.2+build1-0ubuntu0.16.04.1","53.0+build6-0ubuntu0.16.04.1","53.0.2+build1-0ubuntu0.16.04.2","53.0.3+build1-0ubuntu0.16.04.2"]},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"54.0+build3-0ubuntu0.14.04.1"}]}],"versions":["24.0+build1-0ubuntu1","25.0+build3-0ubuntu0.13.10.1","28.0~b2+build1-0ubuntu2","28.0+build1-0ubuntu1","28.0+build2-0ubuntu1","28.0+build2-0ubuntu2","29.0+build1-0ubuntu0.14.04.2","30.0+build1-0ubuntu0.14.04.3","31.0+build1-0ubuntu0.14.04.1","32.0+build1-0ubuntu0.14.04.1","32.0.3+build1-0ubuntu0.14.04.1","33.0+build2-0ubuntu0.14.04.1","34.0+build2-0ubuntu0.14.04.1","35.0+build3-0ubuntu0.14.04.2","35.0.1+build1-0ubuntu0.14.04.1","36.0+build2-0ubuntu0.14.04.4","36.0.1+build2-0ubuntu0.14.04.1","36.0.4+build1-0ubuntu0.14.04.1","37.0+build2-0ubuntu0.14.04.1","37.0.1+build1-0ubuntu0.14.04.1","37.0.2+build1-0ubuntu0.14.04.1","38.0+build3-0ubuntu0.14.04.1","39.0+build5-0ubuntu0.14.04.1","39.0.3+build2-0ubuntu0.14.04.1","40.0+build4-0ubuntu0.14.04.1","40.0+build4-0ubuntu0.14.04.4","40.0.3+build1-0ubuntu0.14.04.1","41.0+build3-0ubuntu0.14.04.1","41.0.1+build2-0ubuntu0.14.04.1","41.0.2+build2-0ubuntu0.14.04.1","42.0+build2-0ubuntu0.14.04.1","43.0+build1-0ubuntu0.14.04.1","43.0.4+build3-0ubuntu0.14.04.1","44.0+build3-0ubuntu0.14.04.1","44.0.1+build2-0ubuntu0.14.04.1","44.0.2+build1-0ubuntu0.14.04.1","45.0+build2-0ubuntu0.14.04.1","45.0.1+build1-0ubuntu0.14.04.2","45.0.2+build1-0ubuntu0.14.04.1","46.0+build5-0ubuntu0.14.04.2","46.0.1+build1-0ubuntu0.14.04.3","47.0+build3-0ubuntu0.14.04.1","48.0+build2-0ubuntu0.14.04.1","49.0+build4-0ubuntu0.14.04.1","49.0.2+build2-0ubuntu0.14.04.1","50.0+build2-0ubuntu0.14.04.2","50.0.2+build1-0ubuntu0.14.04.1","50.1.0+build2-0ubuntu0.14.04.1","51.0.1+build2-0ubuntu0.14.04.1","51.0.1+build2-0ubuntu0.14.04.2","52.0+build2-0ubuntu0.14.04.1","52.0.1+build2-0ubuntu0.14.04.1","52.0.2+build1-0ubuntu0.14.04.1","53.0+build6-0ubuntu0.14.04.1","53.0.2+build1-0ubuntu0.14.04.2","53.0.3+build1-0ubuntu0.14.04.2"],"bundled":21},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"54.0+build3-0ubuntu0.16.04.1"}]}],"versions":["41.0.2+build2-0ubuntu1","42.0+build2-0ubuntu1","44.0+build3-0ubuntu2","44.0.1+build1-0ubuntu1","44.0.2+build1-0ubuntu1","45.0+build2-0ubuntu1","45.0.1+build1-0ubuntu1","45.0.2+build1-0ubuntu1","46.0+build5-0ubuntu0.16.04.2","46.0.1+build1-0ubuntu0.16.04.2","47.0+build3-0ubuntu0.16.04.1","48.0+build2-0ubuntu0.16.04.1","49.0+build4-0ubuntu0.16.04.1","49.0.2+build2-0ubuntu0.16.04.2","50.0+build2-0ubuntu0.16.04.2","50.0.2+build1-0ubuntu0.16.04.1","50.1.0+build2-0ubuntu0.16.04.1","51.0.1+build2-0ubuntu0.16.04.1","51.0.1+build2-0ubuntu0.16.04.2","52.0+build2-0ubuntu0.16.04.1","52.0.1+build2-0ubuntu0.16.04.1","52.0.2+build1-0ubuntu0.16.04.1","53.0+build6-0ubuntu0.16.04.1","53.0.2+build1-0ubuntu0.16.04.2","53.0.3+build1-0ubuntu0.16.04.2"],"bundled":21}],"products":[{"vendor":"mozilla","product":"firefox"},{"vendor":"redhat","product":"enterprise_linux_desktop"},{"vendor":"redhat","product":"enterprise_linux_server"},{"vendor":"redhat","product":"enterprise_linux_workstation"}],"references":[{"url":"https://access.redhat.com/errata/RHSA-2018:2112","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Third Party Advisory","advisory"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2017-15/","tags":["x_refsource_CONFIRM","x_transferred","Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1038689","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred","Third Party Advisory","VDB Entry"]},{"url":"https://access.redhat.com/errata/RHSA-2018:2113","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Third Party Advisory","advisory"]},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=1358248","tags":["x_refsource_CONFIRM","x_transferred","Exploit","Issue Tracking","Patch"]},{"url":"http://www.securityfocus.com/bid/99047","tags":["vdb-entry","x_refsource_BID","x_transferred","Third Party Advisory","VDB Entry"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-7762","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-7g8j-7wv5-6f7h"},{"url":"https://access.redhat.com/security/updates/classification/#critical","tags":["article"]},{"url":"https://www.mozilla.org/en-US/security/advisories/mfsa2018-16/","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1584035","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1590493","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1595024","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1595025","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1595027","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1595028","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1595029","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1595030","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1595031","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1595037","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1595040","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2018/rhsa-2018_2112.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-7762","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-7762","tags":["advisory","report"]},{"url":"https://www.mozilla.org/en-US/security/advisories/mfsa2017-15/","tags":["article","report"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-5156","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-5156","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-5156","tags":["advisory"]},{"url":"https://www.mozilla.org/en-US/security/advisories/mfsa2018-16/#CVE-2018-5156","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-5188","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-5188","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-5188","tags":["advisory"]},{"url":"https://www.mozilla.org/en-US/security/advisories/mfsa2018-16/#CVE-2018-5188","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-6126","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-6126","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-6126","tags":["advisory"]},{"url":"https://chromereleases.googleblog.com/2018/05/stable-channel-update-for-desktop_58.html","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-12359","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-12359","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-12359","tags":["advisory"]},{"url":"https://www.mozilla.org/en-US/security/advisories/mfsa2018-16/#CVE-2018-12359","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-12360","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-12360","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-12360","tags":["advisory"]},{"url":"https://www.mozilla.org/en-US/security/advisories/mfsa2018-16/#CVE-2018-12360","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-12362","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-12362","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-12362","tags":["advisory"]},{"url":"https://www.mozilla.org/en-US/security/advisories/mfsa2018-16/#CVE-2018-12362","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-12363","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-12363","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-12363","tags":["advisory"]},{"url":"https://www.mozilla.org/en-US/security/advisories/mfsa2018-16/#CVE-2018-12363","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-12364","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-12364","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-12364","tags":["advisory"]},{"url":"https://www.mozilla.org/en-US/security/advisories/mfsa2018-16/#CVE-2018-12364","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-12365","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-12365","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-12365","tags":["advisory"]},{"url":"https://www.mozilla.org/en-US/security/advisories/mfsa2018-16/#CVE-2018-12365","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-12366","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-12366","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-12366","tags":["advisory"]},{"url":"https://www.mozilla.org/en-US/security/advisories/mfsa2018-16/#CVE-2018-12366","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2018/rhsa-2018_2113.json","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2017-7762","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-3315-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2017-5470","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-5471","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-5472","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-7749","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-7750","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-7751","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-7752","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-7754","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-7756","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-7757","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-7758","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-7764","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-7771","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-7772","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-7773","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-7774","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-7775","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-7776","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-7777","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-7778","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2017-7762","description":"When entered directly, Reader Mode did not strip the username and password section of URLs displayed in the addressbar. This can be used for spoofing the domain of the current page. This vulnerability affects Firefox \u003c 54.","status":"published","published":"2018-06-11T21:00:00Z","modified":"2024-08-05T16:12:28.256Z","updated_at":"2026-11-02T14:33:20.843976Z"}],"euvd":[{"id":"EUVD-2017-16737","description":"When entered directly, Reader Mode did not strip the username and password section of URLs displayed in the addressbar. This can be used for spoofing the domain of the current page. This vulnerability affects Firefox \u003c 54.","status":"published","published":"2018-06-11T21:00:00Z","modified":"2024-08-05T16:12:28Z","updated_at":"2026-11-03T02:39:07.559484Z"}],"ghsa":[{"id":"GHSA-7g8j-7wv5-6f7h","title":"When entered directly, Reader Mode did not strip the username and password section of URLs...","description":"When entered directly, Reader Mode did not strip the username and password section of URLs displayed in the addressbar. This can be used for spoofing the domain of the current page. This vulnerability affects Firefox \u003c 54.","status":"published","published":"2022-05-14T03:12:05Z","modified":"2023-02-02T05:07:07Z","cvss":[{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","level":"high"}],"cwes":["CWE-20"],"updated_at":"2026-11-02T14:52:26.447554Z"}],"nvd":[{"id":"CVE-2017-7762","description":"When entered directly, Reader Mode did not strip the username and password section of URLs displayed in the addressbar. This can be used for spoofing the domain of the current page. This vulnerability affects Firefox \u003c 54.","status":"published","published":"2018-06-11T21:29:08.343Z","modified":"2026-06-17T01:25:08.783Z","cvss":[{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","level":"high","assessor":"primary"},{"version":"2.0","score":5,"vector":"AV:N/AC:L/Au:N/C:N/I:P/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-20"],"updated_at":"2026-11-02T14:04:18.679411Z"}],"osv":[{"id":"RHSA-2018:2112","title":"Red Hat Security Advisory: firefox security update","status":"published","published":"2024-09-16T01:36:39Z","modified":"2026-06-28T10:25:28Z","cvss":[{"version":"3.0","score":9.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:53:04.822845Z"},{"id":"RHSA-2018:2113","title":"Red Hat Security Advisory: firefox security update","status":"published","published":"2024-09-16T01:36:33Z","modified":"2026-06-28T10:25:29Z","cvss":[{"version":"3.0","score":9.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:53:04.822845Z"},{"id":"UBUNTU-CVE-2017-7762","description":"When entered directly, Reader Mode did not strip the username and password section of URLs displayed in the addressbar. This can be used for spoofing the domain of the current page. This vulnerability affects Firefox \u003c 54.","status":"published","published":"2017-06-14T00:00:00Z","modified":"2026-04-22T11:33:01.257097Z","cvss":[{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","level":"high"}],"updated_at":"2026-11-02T15:54:15.773974Z"},{"id":"USN-3315-1","title":"firefox vulnerabilities","description":"Multiple security issues were discovered in Firefox. If a user were\ntricked in to opening a specially crafted website, an attacker could\npotentially exploit these to cause a denial of service, read uninitialized\nmemory, obtain sensitive information, spoof the addressbar contents, or\nexecute arbitrary code. (CVE-2017-5470, CVE-2017-5471, CVE-2017-5472,\nCVE-2017-7749, CVE-2017-7750, CVE-2017-7751, CVE-2017-7752, CVE-2017-7754,\nCVE-2017-7756, CVE-2017-7757, CVE-2017-7758, CVE-2017-7762, CVE-2017-7764)\n\nMultiple security issues were discovered in the Graphite 2 library used by\nFirefox. If a user were tricked in to opening a specially crafted website,\nan attacker could potentially exploit these to cause a denial of service,\nread uninitialized memory, or execute arbitrary code. (CVE-2017-7771,\nCVE-2017-7772, CVE-2017-7773, CVE-2017-7774, CVE-2017-7775, CVE-2017-7776,\nCVE-2017-7777, CVE-2017-7778)\n","status":"published","published":"2017-06-15T11:46:10Z","modified":"2026-04-22T09:36:29.694721Z","updated_at":"2026-11-02T16:58:13.496563Z"}]}}