Lucene search

CVE-2017-5466

🗓️ 11 Jun 2018 21:07:29Reported by mozillaType

If page loaded from original site through hyperlink contains "data:text/html" redirect, XSS attack possible

Reporter	Title	Published	Views	Family All 85
NVD	CVE-2017-5466	11 Jun 201821:29	–	nvd
RedhatCVE	CVE-2017-5466	20 Apr 201705:48	–	redhatcve
Veracode	Cross-Site Scripting (XSS)	2 May 201906:10	–	veracode
Prion	Cross site scripting	11 Jun 201821:29	–	prion
UbuntuCve	CVE-2017-5466	20 Apr 201700:00	–	ubuntucve
Tenable Nessus	Linux Distros Unpatched Vulnerability : CVE-2017-5466	4 Mar 202500:00	–	nessus
Tenable Nessus	openSUSE Security Update : Mozilla Firefox (openSUSE-2017-509)	25 Apr 201700:00	–	nessus
Tenable Nessus	Oracle Linux 6 / 7 : thunderbird (ELSA-2017-1201)	9 May 201700:00	–	nessus
Tenable Nessus	Virtuozzo 6 : thunderbird (VZLSA-2017-1201)	13 Jul 201700:00	–	nessus
Tenable Nessus	CentOS 6 / 7 : thunderbird (CESA-2017:1201)	10 May 201700:00	–	nessus

Nvd

Vulners

Node

redhat enterprise_linuxMatch6.0

redhat enterprise_linuxMatch7.0

redhat enterprise_linux_desktopMatch6.0

redhat enterprise_linux_desktopMatch7.0

redhat enterprise_linux_serverMatch6.0

redhat enterprise_linux_serverMatch7.0

redhat enterprise_linux_server_ausMatch7.3

redhat enterprise_linux_server_ausMatch7.4

redhat enterprise_linux_server_eusMatch7.3

redhat enterprise_linux_server_eusMatch7.4

redhat enterprise_linux_server_eusMatch7.5

redhat enterprise_linux_workstationMatch6.0

redhat enterprise_linux_workstationMatch7.0

Node

mozilla thunderbirdRange<52.1.0

Node

mozilla firefoxRange<53.0

Node

mozilla firefox_esrRange<52.1.0

[
  {
    "product": "Thunderbird",
    "vendor": "Mozilla",
    "versions": [
      {
        "lessThan": "52.1",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  },
  {
    "product": "Firefox ESR",
    "vendor": "Mozilla",
    "versions": [
      {
        "lessThan": "52.1",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  },
  {
    "product": "Firefox",
    "vendor": "Mozilla",
    "versions": [
      {
        "lessThan": "53",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
securityfocus	www.securityfocus.com/bid/97940
access	www.access.redhat.com/errata/RHSA-2017:1106
bugzilla	www.bugzilla.mozilla.org/show_bug.cgi
mozilla	www.mozilla.org/security/advisories/mfsa2017-12/
mozilla	www.mozilla.org/security/advisories/mfsa2017-13/
mozilla	www.mozilla.org/security/advisories/mfsa2017-10/
securitytracker	www.securitytracker.com/id/1038320
access	www.access.redhat.com/errata/RHSA-2017:1201

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

11 Jun 2018 21:29Current

6.3Medium risk

Vulners AI Score6.3

CVSS24.3

CVSS36.1

EPSS0.00412

CWE-79