| Package | Affected versions | Patched versions |
|---|---|---|
| mozilla | = 1.0 |
Mozilla 1.0 allows remote attackers to steal cookies from other domains via a javascript: URL with a leading "//" and ending in a newline, which causes the host/path check to fail.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free