CVE-2017-5452: Mozilla Firefox

Medium severity, CVSS 4.3. EPSS: 1.2% chance of exploitation in the next 30 days.

Malicious sites can display a spoofed addressbar on a page when the existing location bar on the new page is scrolled out of view if an HTML editable page element is user selected. Note: This attack only affects Firefox for Android. Other operating systems are not affected. This vulnerability affects Firefox < 53.

Affected products

• Mozilla Firefox: before 53.0 (fixed in 53.0)

Published 2018-06-11. Last modified 2026-06-17.