vulnerability
MFSA2016-66 Firefox: Location bar spoofing via data URLs with malformed/invalid mediatypes (CVE-2016-5251)
| Severity | CVSS | Published | Added | Modified |
|---|---|---|---|---|
| 4 | (AV:N/AC:M/Au:N/C:N/I:P/A:N) | Aug 2, 2016 | Aug 3, 2016 | Aug 11, 2025 |
Severity
4
CVSS
(AV:N/AC:M/Au:N/C:N/I:P/A:N)
Published
Aug 2, 2016
Added
Aug 3, 2016
Modified
Aug 11, 2025
Description
Mozilla Firefox before 48.0 allows remote attackers to spoof the location bar via crafted characters in the media type of a data: URL.
Solution
mozilla-firefox-upgrade-48_0
NEW
Explore Exposure Command
Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.