Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Mozilla 1.1 and earlier, and Mozilla-based browsers such as Netscape and Galeon, set the document referrer too quickly in certain situations when a new page is being loaded, which allows web pages to determine the next page that is being visited, including manually entered URLs, using the onunload handler.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Mozilla OnUnload事件例程远程信息泄露漏洞
Vulnerability Description
Mozilla是一款流行的开放源代码的WEB浏览器。 Mozilla在脚本"onUnload"事件处理例程实现上存在问题，远程攻击者可以利用这个漏洞获得目标用户系统上的敏感信息，如要访问的WEB页面信息。 当其他页面使用这个"onUnload"事件处理例程弹出的时候，有此漏洞的客户端会把要被访问的下页地址封装在HTTP Referer字段中，而正确的操作行为是把上一页访问过的地址包含到HTTP Referer字段中，攻击者利用这个事件处理例程，通过构建恶意WEB页，诱使用户点击，可导致泄露要被访问的下页页
CVSS Information
N/A
Vulnerability Type
N/A