6.8 Medium
AI Score
Confidence
Low
0.003 Low
EPSS
Percentile
68.4%
Mozilla Firefox 2.0.0.1 through 2.0.0.3 does not canonicalize URLs before checking them against the phishing site blacklist, which allows remote attackers to bypass phishing protection via multiple / (slash) characters in the URL.
osvdb.org/34535
www.securityfocus.com/archive/1/464149/100/0/threaded
exchange.xforce.ibmcloud.com/vulnerabilities/33486