CVE-2017-5417: Mozilla Firefox

Medium severity, CVSS 5.3. EPSS: 1.1% chance of exploitation in the next 30 days.

When dragging content from the primary browser pane to the addressbar on a malicious site, it is possible to change the addressbar so that the displayed location following navigation does not match the URL of the newly loaded page. This allows for spoofing attacks. This vulnerability affects Firefox < 52.

Affected products

• Mozilla Firefox: before 52.0 (fixed in 52.0)

Published 2018-06-11. Last modified 2026-06-17.