Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The nsDocShell::OnRedirectStateChange function in docshell/base/nsDocShell.cpp in Mozilla Firefox 3.5.x before 3.5.11 and 3.6.x before 3.6.7, and SeaMonkey before 2.0.6, allows remote attackers to spoof the SSL security status of a document via vectors involving multiple requests, a redirect, and the history.back and history.forward JavaScript functions.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Mozilla Firefox history.back()和history.forward()方式地址栏欺骗漏洞
Vulnerability Description
Mozilla Firefox是美国Mozilla基金会开发的一款开源Web浏览器。 Firefox在访问安全网页时显示位置栏的方式存在漏洞。恶意服务器可以利用这个漏洞以看起来来自安全服务器的方式呈现数据，即使数据非来自安全的服务器。 如果要利用这个漏洞，服务器首先要将对明文资源的请求重新定向到有效SSL/TLS证书后的其他资源，之后对原始明文资源的第二次请求所回复的响应就不是重新定向，而是包含history.back()和history.forward()的JavaScript，导致显示明文资源时地址栏
CVSS Information
N/A
Vulnerability Type
N/A