Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:39822
HistoryMar 18, 2023 - 5:52 a.m.

Information Disclosure

2023-03-1805:52:17
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
6
firefox-esr
vulnerability
information disclosure
cross-origin iframe
user confusion
website spoofing
attacks
software

0.001 Low

EPSS

Percentile

48.6%

firefox-esr is vulnerable to Information Disclosure. The vulnerability that exists when dragging a URL from a cross-origin iframe that was removed during the drag could have led to user confusion and website spoofing attacks.