| Package | Affected versions | Patched versions |
|---|---|---|
| firefox | = 38.0= 38.0.1= 38.0.5= 38.1.0= 38.1.1= 38.2.0= 38.2.1≤ 40.0.3 |
Mozilla Firefox before 41.0 and Firefox ESR 38.x before 38.3 allow user-assisted remote attackers to bypass intended access restrictions and discover a redirect's target URL via crafted JavaScript code that executes after a drag-and-drop action of an image into a TEXTBOX element.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free