Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Mozilla Firefox before 3.0.9 and SeaMonkey 1.1.17 do not block javascript: URIs in Refresh headers in HTTP responses, which allows remote attackers to conduct cross-site scripting (XSS) attacks via vectors related to (1) injecting a Refresh header or (2) specifying the content of a Refresh header. NOTE: it was later reported that Firefox 3.6 a1 pre and Mozilla 1.7.x and earlier are also affected.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Mozilla Firefox javascript: URIs跨站脚本攻击漏洞
Vulnerability Description
Firefox是Mozilla所发布的开源WEB浏览器。 Mozilla Firefox应用javascript: URIs时存在跨站脚本攻击漏洞。当服务器响应包含有javascript: URI的Refresh头时，Firefox会重新定向到javascript: URI。如果攻击者能给在服务器响应中注入Refresh头，或能给控制站点对Refresh头所设置的值，就可以执行跨站脚本攻击。
CVSS Information
N/A
Vulnerability Type
N/A