VULNERABILITY INTELLIGENCE

CVE-2005-2703

CVSS score5 MEDIUM
EPSS probability1.79%
CISA KEVNot currently listed
Published2005-09-23
Last modified2026-06-16
CVSS vectorAV:N/AC:L/Au:N/C:N/I:P/A:N

Description

Firefox before 1.0.7 and Mozilla Suite before 1.7.12 allows remote attackers to modify HTTP headers of XML HTTP requests via XMLHttpRequest, and possibly use the client to exploit vulnerabilities in servers or proxies, including HTTP request smuggling and HTTP request splitting.

Weakness classification

  • CWE-94: Improper Control of Generation of Code ('Code Injection')

Primary references