Veracode Vulnerability DatabaseVERACODE:43093URL Spoofing Via Default Search Engine
3.1 Low
CVSS3
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N
0.001 Low
EPSS
Percentile
20.8%
Firefox is vulnerable to URL Spoofing via Default Search Engine. The default search engine in the web browser can display search queries as if they were the current URL when the query resembles a well-formed URL. This behavior might allow a malicious site, if set as the default search engine, to spoof another site.
| CPE | Name | Operator | Version |
|---|---|---|---|
| firefox:sid | eq | 81.0-2 | |
| firefox:sid | eq | 83.0-1 | |
| firefox:sid | eq | 82.0.3-1 | |
| firefox:sid | eq | 81.0-2 | |
| firefox:sid | eq | 83.0-1 | |
| firefox:sid | eq | 82.0.3-1 |
Related
3.1 Low
CVSS3
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N
0.001 Low
EPSS
Percentile
20.8%