A vulnerability exists where the caret (“^”) character is improperly escaped constructing some URIs due to it being used as a separator, allowing for possible spoofing of origin attributes. This vulnerability affects Firefox ESR < 60.8, Firefox < 68, and Thunderbird < 60.8.
4.5 Medium
AI Score
Confidence
0.009 Low
EPSS
Percentile
82.9%