Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:40211
HistoryApr 20, 2023 - 9:37 a.m.

Spoofing Attacks

2023-04-2009:37:52
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
16
firefox
spoofing attacks
vulnerability
fullscreen
unauthorized actions

EPSS

0.001

Percentile

40.2%

firefox is vulenrable to Spoofing Attacks. The vulnerability exists due to obscured fullscreen notification issue by using a combination of window.open, fullscreen requests, window.name assignments, and setInterval calls which allows an attacker to perform unaothorized actions.