CVE-2015-7191

 

Published at: - 05-11-2015 06:59

Last modified: - 26-09-2022 05:45

Total changes: - 2

Description

Mozilla Firefox before 42.0 on Android improperly restricts URL strings in intents, which allows attackers to conduct cross-site scripting (XSS) attacks via vectors involving an intent: URL and fallback navigation, aka "Universal XSS (UXSS)."

Common Vulnerability Scoring System (CVSS)

AV:N/AC:M/Au:N/C:N/I:P/A:N

 

Verification logic

 

Reference

• http://www.mozilla.org/security/announce/2015/mfsa2015-125.html
• https://bugzilla.mozilla.org/show_bug.cgi?id=1208956
• http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html
• GLSA-201512-10-
• openSUSE-SU-2015:1942-
• 1034069-

 

Keywords

NVD

 

CVE-2015-7191

 

CVE

 

Common vulnerabilities & exposures

 

CVSS

 

Common vulnerability scoring system

 

Security

 

Vulnerabilities

 

Exposures