CVEs-PoC/2017/CVE-2017-5415.md

CVE-2017-5415

Description

An attack can use a blob URL and script to spoof an arbitrary addressbar URL prefaced by "blob:" as the protocol, leading to user confusion and further spoofing attacks. This vulnerability affects Firefox < 52.

POC

Reference

• https://bugzilla.mozilla.org/show_bug.cgi?id=1321719
• https://www.mozilla.org/security/advisories/mfsa2017-05/

Github

• https://github.com/649/CVE-2017-5415
• https://github.com/hwiwonl/dayone