| Package | Affected versions | Patched versions |
|---|---|---|
| firefox | < 70.0 | 70.0 |
By navigating a tab using the history API, an attacker could cause the address bar to display the incorrect domain (with the https:// scheme, a blocked port number such as '1', and without a lock icon) while controlling the page contents. This vulnerability affects Firefox < 70.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free