CVE-2002-2314

No fix known EPSS 9%

Mozilla 1.0 allows remote attackers to steal cookies from other domains via a javascript: URL with a leading "//" and ending in a newline, which causes the host/path check to fail.

Published 2007-10-26 · CVE record · OSV

Products: mozilla