Lucene search

K
cvelistMozillaCVELIST:CVE-2015-0819
HistoryFeb 25, 2015 - 11:00 a.m.

CVE-2015-0819

2015-02-2511:00:00
mozilla
raw.githubusercontent.com

6.2 Medium

AI Score

Confidence

Low

0.008 Low

EPSS

Percentile

81.1%

The UITour::onPageEvent function in Mozilla Firefox before 36.0 does not ensure that an API call originates from a foreground tab, which allows remote attackers to conduct spoofing and clickjacking attacks by leveraging access to a UI Tour web site.

6.2 Medium

AI Score

Confidence

Low

0.008 Low

EPSS

Percentile

81.1%