CVE-2002-2314: Mozilla

Medium severity, CVSS 5.0. EPSS: 8.5% chance of exploitation in the next 30 days.

Mozilla 1.0 allows remote attackers to steal cookies from other domains via a javascript: URL with a leading "//" and ending in a newline, which causes the host/path check to fail.

Affected products

• Mozilla Mozilla: version 1.0 only

Published 2002-12-31. Last modified 2026-06-16.