CVE-2017-5450: Mozilla Firefox

High severity, CVSS 7.5. EPSS: 1.8% chance of exploitation in the next 30 days.

A mechanism to spoof the Firefox for Android addressbar using a "javascript:" URI. On Firefox for Android, the base domain is parsed incorrectly, making the resulting location less visibly a spoofed site and showing an incorrect domain in appended notifications. This vulnerability affects Firefox < 53.

Affected products

• Mozilla Firefox: before 53.0 (fixed in 53.0)

Published 2018-06-11. Last modified 2026-06-17.