CVE-2017-5387
PoC —CVSS 3.0
3.3 low
EPSS
<1%p34
Published
()
Modified
Description
The existence of a specifically requested local file can be found due to the double firing of the "onerror" when the "source" attribute on a " " tag refers to a file that does not exist if the source page is loaded locally. This vulnerability affects Firefox < 51.
- Vendors
- mozilla
- Products
- firefox
- Weakness
- CWE-538
- Vector
- CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
In the news0 stories
No ingested article mentions this CVE yet.