CVE-2017-7762: Mozilla Firefox

High severity, CVSS 7.5. EPSS: 1.9% chance of exploitation in the next 30 days.

When entered directly, Reader Mode did not strip the username and password section of URLs displayed in the addressbar. This can be used for spoofing the domain of the current page. This vulnerability affects Firefox < 54.

Affected products

• Mozilla Firefox: before 54.0 (fixed in 54.0)
• Red Hat Enterprise Linux Desktop: version 6.0 only; version 7.0 only
• Red Hat Enterprise Linux Server: version 6.0 only; version 7.0 only
• Red Hat Enterprise Linux Workstation: version 6.0 only; version 7.0 only

Published 2018-06-11. Last modified 2026-06-17.